The issues, discovered by Pathlock, affect both the Windows and Java versions of SAP GUI and are tracked as CVE-2025-0055 and CVE-2025-0056, respectively. The vulnerabilities center on SAP GUI’s input ...

SAP GUI, a trusted interface for hundreds of thousands of global enterprises, has been found to be storing sensitive user data with outdated encryption, potentially allowing data breaches.