CVE-2025-42981: URL Redirection to Untrusted Site

Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at a location not properly sanitized. When a victim clicks on this link, the script executes within the victim's browser, redirecting the...

PT-2025-28287 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: The issue allows an authenticated non-administrative user to call a remote-enabled function module, potentially granting access to non-sensitive information about the SAP system and O...

SAP NetWeaver 安全漏洞

SAP NetWeaver is a set of integrated service-oriented application platforms from SAP, Germany. The platform primarily provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver that originates from an authenticated, non-administrative use...

PT-2025-28288 · Sap · Sap Netweaver Application Server Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description: The issue allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. When a victim clicks on this crafte...

SAP NetWeaver Application Server ABAP和SAP ABAP Platform 跨站脚本漏洞

SAP ABAP Platform and SAP NetWeaver Application Server ABAP are both products of SAP, Germany.SAP ABAP Platform is an ABAP-based SAP solution.SAP NetWeaver Application Server SAP NetWeaver Application Server ABAP is a platform for running and developing applications based on the ABAP language. A...

CVE-2025-42969: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitatio...

CVE-2025-42953: Missing Authorization

SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confidentiality of the system...

SAP NetWeaver Business Warehouse 安全漏洞

SAP NetWeaver Business Warehouse is a data warehouse solution from SAP, Germany. A security vulnerability exists in SAP NetWeaver Business Warehouse, which originates from a privileged attacker who can execute an RFC function module without input parameters resulting in a high CPU load, which may...

CVE-2025-42954: Loop with Unreachable Exit Condition

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on...

PT-2025-28353

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description: The issue allows an unauthenticated attacker to create a malicious link that can be made publicly available. When an authenticated victim...

SAP NetWeaver Application Server ABAP and ABAP Platform 跨站脚本漏洞

SAP NetWeaver Application Server ABAP and ABAP Platform is a platform for running and developing applications based on the ABAP language from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server ABAP and ABAP Platform, which originates from an...

PT-2025-28285 · Sap · Sap Netweaver Xml Data Archiving Service

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver XML Data Archiving Service affected versions not specified Description: The issue allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially...

SAP NetWeaver 代码问题漏洞

SAP NetWeaver is a set of integrated service-oriented application platform from SAP. The platform primarily provides a development and runtime environment for SAP applications. A code issue vulnerability exists in SAP NetWeaver that stems from insecure Java deserialization and could lead to high...

CVE-2025-42966: Deserialization of Untrusted Data

SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially crafted serialized Java object. This could lead to high impact on confidentiality, integrity, and availability ...

PT-2025-28295 · Sap · Sap Netweaver Enterprise Portal Federated Portal Network

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Enterprise Portal Federated Portal Network affected versions not specified Description: The issue arises when a privileged user uploads untrusted or malicious content. Upon deserialization, this content could compromise the...

SAP NetWeaver Enterprise Portal Federated Portal Network 代码问题漏洞

SAP NetWeaver Enterprise Portal Federated Portal Network is a portal integration architecture from SAP, Germany. A code issue vulnerability exists in SAP NetWeaver Enterprise Portal Federated Portal Network, which originates from a privileged user being able to upload untrusted content...

CVE-2025-42980: Deserialization of Untrusted Data

SAP NetWeaver Enterprise Portal Federated Portal Network is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...

PT-2025-28276 · Sap · Sap Netweaver System Configuration

Name of the Vulnerable Software and Affected Versions: SAP Netweaver System Configuration affected versions not specified Description: The issue results from a lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could completely compromise t...

PT-2025-28293 · Sap · Sap Netweaver Application Server Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server Java affected versions not specified Description: The issue concerns a component in SAP NetWeaver Application Server Java that handles outbound TLS connections. This component does not properly verify the...

SAP NetWeaver Application Server Java 安全漏洞

SAP NetWeaver Application Server Java is an application server from SAP Germany that provides a Java runtime environment. The product is primarily used for developing and running Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java that stems from...