Miembros de
Boletines de Vulnerabilidades |
CVE-2025-42872 |
|
| Software afectado | SAP |
| Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-42872 | |
