CVE-2025-42942: fallo de gravedad media en SAP_SE SAP NetWeaver Application Server for ABAP
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.1epss 0.2%
SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability. Due to this, an unauthenticated attacker could craft a URL embedded with malicious script and trick an unauthenticated victim to click on it to execute the script. Upon successful exploitation, the attacker could access and modify limited information within the scope of victim's browser. This vulnerability has no impact on availability of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Productos afectados
SAP_SE · SAP NetWeaver Application Server for ABAPCVEs relacionadas — SAP_SE SAP NetWeaver Application Server for ABAP
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-42953HIGHMissing Authorization check in SAP NetWeaver Application Server for ABAPEPSS 0.5%CVE-2025-42989CRITICALMissing Authorization check in SAP NetWeaver Application Server for ABAPEPSS 0.4%CVE-2025-42961MEDIUMMissing Authorization check in SAP NetWeaver Application Server for ABAPEPSS 0.4%CVE-2026-27688MEDIUMMissing Authorization check in SAP NetWeaver Application Server for ABAPEPSS 0.3%CVE-2025-42882MEDIUMMissing Authorization check in SAP NetWeaver Application Server for ABAPEPSS 0.2%CVE-2026-58246MEDIUMInformation Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformEPSS 0.2%