SAP© Security Advisories - 07 2025 - Severity Low

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Hey there! Glad you made it.
Relax, this release only contains severity low advisories. None of the 2 corrections ranges higher than CVSS score higher than 3.5.

Severity

SAP© Security advisories 2

System Types

Affected SAP© system types

_{Related note}
3557179

_CVSS
3.5

_{Affected system
type}
Java

_Patchday
2025-07

_{Released
on}
2025/07/08

Description
[CVE-2025-42978] Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java

Security Advisory

_{Related note}
3608156

_CVSS
2.7

_{Affected system
type}
ABAP

_Patchday
2025-07

_{Released
on}
2025/07/08

Description
[CVE-2025-42954] Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application).

Security Advisory

Notifications

Severity

SAP© Security advisories 2

System Types

Affected SAP© system types

Related note 3557179

CVSS 3.5

Affected system type Java

Patchday2025-07

Released on2025/07/08

Related note 3608156

CVSS 2.7

Affected system type ABAP

Patchday2025-07

Released on2025/07/08

_{Related note}
3557179

_CVSS
3.5

_{Affected system
type}
Java

_Patchday
2025-07

_{Released
on}
2025/07/08

_{Related note}
3608156

_CVSS
2.7

_{Affected system
type}
ABAP

_Patchday
2025-07

_{Released
on}
2025/07/08