Vulnerability Bulletins |
CVE-2025-42975 |
|
| Affected software | SAP |
| SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to access and/or modify information related to the web client without affecting availability. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-42975 | |