SAP Note 3525295
Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)
LowCVSS 3.4SAP NetWeaver AS Java
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2025-42927
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Affected products and versions
- Product SAP NetWeaver AS Java (Adobe Document Service)
Versions: ADSSAP 7.50
Appears in
Patch Days listing this note, newest first.
- September 2025LowCVSS 3.4