Количество 3
Количество 3
CVE-2025-42872
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability.
GHSA-4f68-6cfp-mfcj
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability.
BDU:2025-15896
Уязвимость программной интеграционной платформы SAP NetWeaver Enterprise Portal (SAP NW EP), связанная с недостаточной защитой служебных данных при реализации кода отладки, позволяющая нарушителю проводить межсайтовые сценарные атаки
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-42872 Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability. | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| GHSA-4f68-6cfp-mfcj Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability. | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
 | BDU:2025-15896 Уязвимость программной интеграционной платформы SAP NetWeaver Enterprise Portal (SAP NW EP), связанная с недостаточной защитой служебных данных при реализации кода отладки, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу