Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-42909
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances
Source: NVD (National Vulnerability Database)
Vulnerability Description
SAP Cloud Appliance Library Appliances allows an attacker with high privileges to leverage an insecure S/4HANA default profile setting in an existing SAP CAL appliances to gain access to other appliances. This has low impact on confidentiality of the application, integrity and availability is not impacted.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
没有’HttpOnly’标志的敏感Cookie
Source: NVD (National Vulnerability Database)
Vulnerability Title
SAP Cloud Appliance Library Appliances 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP Cloud Appliance Library Appliances是德国思爱普(SAP)公司的一个云端镜像与系统部署平台。 SAP Cloud Appliance Library Appliances存在安全漏洞,该漏洞源于S/4HANA默认配置文件设置不安全,可能导致攻击者访问其他设备。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
SAP_SESAP Cloud Appliance Library Appliances TITANIUM_WEBAPP 4.0 -
II. Public POCs for CVE-2025-42909
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-42909
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2025-42909

No comments yet


Leave a comment