CVE-2025-31325 Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation)

Due to a Cross-Site Scripting vulnerability in SAP NetWeaver ABAP Keyword Documentation, an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the...

CVE-2025-31325 Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation)

Due to a Cross-Site Scripting vulnerability in SAP NetWeaver ABAP Keyword Documentation, an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the...

CVE-2025-31325

SAP NetWeaver ABAP Keyword Documentation is affected by a Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can inject JavaScript into a vulnerable page via an unprotected parameter, causing the script to run in the victim's browser and potentially access restricted informatio...

CVE-2025-23192

CVE-2025-23192 - SAP BusinessObjects BI Workspace is described as an unauthenticated cross-site scripting (XSS) vulnerability where an attacker can craft and store malicious scripts in a BI workspace; when victims load the workspace, the script can access session data and affect confidentiality (...

CVE-2025-23192 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace)

SAP BusinessObjects Business Intelligence BI Workspace allows an unauthenticated attacker to craft and store malicious script within a workspace. When the victim accesses the workspace, the script will execute in their browser enabling the attacker to potentially access sensitive session...

CVE-2025-23192 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace)

SAP BusinessObjects Business Intelligence BI Workspace allows an unauthenticated attacker to craft and store malicious script within a workspace. When the victim accesses the workspace, the script will execute in their browser enabling the attacker to potentially access sensitive session...

PT-2025-24583 · Sap · Sap Businessobjects Business Intelligence

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence BI Workspace affected versions not specified Description: The issue allows an unauthenticated attacker to craft and store malicious script within a workspace. When the victim accesses the workspace, t...

PT-2025-24593 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue concerns a lack of necessary authorization checks in the Bank Account Application. This allows an authenticated 'approver' user to delete attachments from another user's bank...

PT-2025-24589 · Sap · Sap Manage Processing Rules

Name of the Vulnerable Software and Affected Versions: SAP Manage Processing Rules For Bank Statement affected versions not specified Description: The issue allows an attacker with basic privileges to edit shared rules of any user by tampering with the request parameter. This is due to a missing...

PT-2025-24588 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA Manage Central Purchase Contract affected versions not specified Description: The issue concerns the lack of necessary authorization checks for authenticated users, allowing an attacker to execute the import function on an entity...

SAP MDM Server 安全漏洞

SAP MDM Server is an MDM server from SAP, Germany. A security vulnerability exists in SAP MDM Server that stems from a memory read access violation triggered by the ReadString function when processing specially crafted packets, which could lead to an unexpected termination of the server process...

PT-2025-24590 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP Business Objects Business Intelligence Platform affected versions not specified Description: The issue allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by manipulating specific HTTP requests. This...

SAP BusinessObjects Business Intelligence 跨站脚本漏洞

SAP BusinessObjects Business Intelligence is an enterprise-class business intelligence solution from SAP. SAP BusinessObjects Business Intelligence suffers from a cross-site scripting vulnerability that originates from an unauthenticated attacker who can store malicious scripts, which can be...

PT-2025-24585 · Sap · Sap Netweaver Visual Composer

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Visual Composer affected versions not specified Description: The issue is caused by insufficient validation of input paths provided by a high-privileged user, allowing an attacker to read or modify arbitrary files. This results ...

SAP NetWeaver 安全漏洞

SAP NetWeaver is a set of integrated service-oriented application platforms from SAP, Germany. The platform primarily provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver that stems from insufficient authorization checking and could...

PT-2025-24594 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue is related to a missing authorization check in the Enterprise Event Enablement component. An attacker with access to the Inbound Binding Configuration can create an RFC...

SAP GRC 安全漏洞

SAP GRC is a suite of solutions and products from SAP, Germany. can help you manage enterprise resources in a way that minimizes risk, builds trust, and reduces compliance costs. A security vulnerability exists in SAP GRC that stems from improper authorization and could result in modification or...

PT-2025-24595 · Sap · Sap Mdm Server

Name of the Vulnerable Software and Affected Versions: SAP MDM Server affected versions not specified Description: The issue allows an attacker to send specially crafted packets to the SAP MDM Server, triggering a memory read access violation in the server process. This causes the server to fail...

PT-2025-24584 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: The issue is related to a Cross-Site Scripting vulnerability. An unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a...

PT-2025-24587 · Sap · Sap Business Warehouse +1

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse and SAP Plug-In Basis affected versions not specified Description: The issue allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system...