CVE-2025-0055 — Information Disclosure vulnerability in SAP GUI for Windows
SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrative privileges or access to the victim…
Published: 2025-01-14 · CVSS: 6.0 · CVSS 3.1
SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data could range from non-critical data to highly sensitive data, causing high impact on confidentiality of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7