CVE-2025-42964 Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

SAP NetWeaver Enterprise Portal Administration is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...

CVE-2025-42963 Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )

A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...

CVE-2025-42963

The CVE-2025-42963 entry describes a critical issue in SAP NetWeaver Application Server for Java Log Viewer: authenticated administrators can exploit unsafe Java object deserialization to achieve full OS compromise, affecting confidentiality, integrity, and availability. The vulnerability is clas...

CVE-2025-42963 Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )

A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...

CVE-2025-42961 Missing Authorization check in SAP NetWeaver Application Server for ABAP

Due to a missing authorization check in SAP NetWeaver Application server for ABAP, an authenticated user with high privileges could exploit the insufficient validation of user permissions to access sensitive database tables. By leveraging overly permissive access configurations, unauthorized...

CVE-2025-42961 Missing Authorization check in SAP NetWeaver Application Server for ABAP

Due to a missing authorization check in SAP NetWeaver Application server for ABAP, an authenticated user with high privileges could exploit the insufficient validation of user permissions to access sensitive database tables. By leveraging overly permissive access configurations, unauthorized...

CVE-2025-42961

CVE-2025-42961 involves SAP NetWeaver Application Server for ABAP, where a missing authorization check allows an authenticated user with high privileges to read sensitive data from database tables. The underlying issue is improper validation of user permissions leading to confidentiality impact (...

CVE-2025-42954

CVE-2025-42954 affects SAP NetWeaver Business Warehouse CCAW. A privileged attacker can cause high CPU load by calling RFC-enabled function modules without input parameters, leading to reduced availability (low impact) with no confidentiality or integrity impact. Public details across sources con...

CVE-2025-42954 Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on...

CVE-2025-42954 Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on...

CVE-2025-42953 Missing Authorization check in SAP NetWeaver Application Server for ABAP

SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confidentiality of the system...

CVE-2025-42953 Missing Authorization check in SAP NetWeaver Application Server for ABAP

SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confidentiality of the system...

CVE-2025-42953

SAP NetWeaver AS ABAP System Configuration is affected by CVE-2025-42953 due to missing authorization checks for authenticated users, enabling privilege escalation and potential full integrity/availability compromise (confidentiality not impacted). Root cause: inadequate access control in the Sys...

SAP NetWeaver Application Server ABAP and ABAP Platform 跨站脚本漏洞

SAP NetWeaver Application Server ABAP and ABAP Platform is a platform for running and developing applications based on the ABAP language from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server ABAP and ABAP Platform, which originates from an...

PT-2025-28280 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application server for ABAP affected versions not specified Description: The issue is caused by a missing authorization check, allowing an authenticated user with high privileges to exploit insufficient validation of user...

PT-2025-28296 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP affected versions not specified Description: The issue allows an unauthenticated attacker to craft a URL link embedding a malicious script. When a victim clicks on this link, the script executes within th...

SAP NetWeaver Application Server for Java 代码问题漏洞

SAP NetWeaver Application Server for Java is a Java EE-based application server from SAP, Germany. A code issue vulnerability exists in SAP NetWeaver Application Server for Java, which stems from insecure Java object deserialization and could lead to a complete crack of the operating system...

PT-2025-28293 · Sap · Sap Netweaver Application Server Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server Java affected versions not specified Description: The issue concerns a component in SAP NetWeaver Application Server Java that handles outbound TLS connections. This component does not properly verify the...

SAP NetWeaver Application Server Java 安全漏洞

SAP NetWeaver Application Server Java is an application server from SAP Germany that provides a Java runtime environment. The product is primarily used for developing and running Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java that stems from...

PT-2025-28276 · Sap · Sap Netweaver System Configuration

Name of the Vulnerable Software and Affected Versions: SAP Netweaver System Configuration affected versions not specified Description: The issue results from a lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could completely compromise t...