CVE-2025-42975

CVE-2025-42975 concerns SAP NetWeaver Application Server ABAP (BIC Document). The vulnerability is an unauthenticated Cross-Site Scripting (XSS) flaw that allows an attacker to craft a URL which, when opened in the BIC Document app, embeds a malicious script and, upon user interaction, executes i...