Boletines de Vulnerabilidades

CVE-2025-42945

   
Software afectado SAP
 
SAP NetWeaver Application Server ABAP has HTML injection vulnerability. Due to this, an attacker could craft a URL with malicious script as payload and trick a victim with active user session into executing it. Upon successful exploit, this vulnerability could lead to limited access to data or its manipulation. There is no impact on availability.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-42945