CVE-2025-43005

4.3 mediumEPSS 0.2%

Medium (4.3). EPSS 0.2% chance of exploitation in the next 30 days.

SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials. While this issue does not impact the Integrity or Availability of the application, it may have a Low impact on the Confidentiality of data.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-256
Published: 2025-05-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://me.sap.com/notes/3574520
https://url.sap/sapsecuritypatchday

Check your stack JSON