Количество 3
Количество 3
CVE-2025-31325
Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The vulnerability does not affect data integrity or availability and operates entirely within the context of the client's browser.
GHSA-mf43-m2mh-xcq6
Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The vulnerability does not affect data integrity or availability and operates entirely within the context of the client's browser.
BDU:2025-07442
Уязвимость компонента ABAP Keyword Documentation программной интеграционной платформы SAP NetWeaver, позволяющая нарушителю проводить межсайтовые сценарные атаки
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-31325 Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The vulnerability does not affect data integrity or availability and operates entirely within the context of the client's browser. | CVSS3: 5.8 | 0% Низкий | больше 1 года назад | |
GHSA-mf43-m2mh-xcq6 Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The vulnerability does not affect data integrity or availability and operates entirely within the context of the client's browser. | CVSS3: 5.8 | 0% Низкий | больше 1 года назад | |
BDU:2025-07442 Уязвимость компонента ABAP Keyword Documentation программной интеграционной платформы SAP NetWeaver, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 5.8 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу