Medium severity · published Jul 8, 2025
CVE-2025-42979
Insecure Key & Secret Management vulnerability in SAP GUI for Windows
5.6
CVSS
0.1%
EPSS
No
On KEV
Description
The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symmetric ciphers for storing the credentials of an RFC user on the client PC. This leads to a high impact on confidentiality because any attacker who gains access to the user hive of this user�s windows registry could recreate the original password. There is no impact on integrity or availability of the application
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
SAP GUI for Windows · SAP_SE
BC-FES-GUI 8.00 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-42979
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-42979
me.sap.com
https://me.sap.com/notes/3607513
url.sap
https://url.sap/sapsecuritypatchday
More from SAP GUI for Windows
6.0
CVE-2025-24870
Insecure Key & Secret Management vulnerability in SAP GUI for Windows
6.0
CVE-2025-0055
Information Disclosure vulnerability in SAP GUI for Windows
5.5
CVE-2025-42888
Information Disclosure vulnerability in SAP GUI for Windows
4.5
CVE-2025-42943
Information Disclosure in SAP GUI for Windows
4.3
CVE-2025-43005
Information Disclosure vulnerability in SAP GUI for Windows
