Vulnerability Bulletins |
CVE-2025-42884 |
|
| Affected software | SAP |
| SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There is no impact on availability. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-42884 | |