SAP Note 3684682
Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM)
HighCVSS 8.2SAP Web Dispatcher and Internet Communication Manager
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2025-42878
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H
Affected products and versions
- Product SAP Web Dispatcher and Internet Communication Manager (ICM)
Versions: KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, WEBDISP 7.22_EXT, 7.54, 7.77, 7.89, 7.93, 9.16, KERNEL 7.22
Appears in
Patch Days listing this note, newest first.
- December 2025HighCVSS 8.2