CVE-2025-42938

CVE-2025-42938 describes a Cross-Site Scripting (XSS) vulnerability in the SAP NetWeaver ABAP Platform. An unauthenticated attacker can generate a malicious link that, when an authenticated user clicks it, is processed during page generation, resulting in malicious content execution within the vi...

CVE-2025-42948 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform

Due to a Cross-Site Scripting XSS vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website�s page generation, resultin...