Логотип exploitDog
bind:CVE-2025-42942
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-42942

Количество 3

Количество 3

nvd логотип

CVE-2025-42942

6 месяцев назад

SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability. Due to this, an unauthenticated attacker could craft a URL embedded with malicious script and trick an unauthenticated victim to click on it to execute the script. Upon successful exploitation, the attacker could access and modify limited information within the scope of victim's browser. This vulnerability has no impact on availability of the application.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-f747-wqq2-4rg3

6 месяцев назад

SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability. Due to this, an unauthenticated attacker could craft a URL embedded with malicious script and trick an unauthenticated victim to click on it to execute the script. Upon successful exploitation, the attacker could access and modify limited information within the scope of victim's browser. This vulnerability has no impact on availability of the application.

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2025-16305

6 месяцев назад

Уязвимость программной интеграционной платформы SAP NetWeaver Application Server ABAP, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-42942

SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability. Due to this, an unauthenticated attacker could craft a URL embedded with malicious script and trick an unauthenticated victim to click on it to execute the script. Upon successful exploitation, the attacker could access and modify limited information within the scope of victim's browser. This vulnerability has no impact on availability of the application.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
github логотип
GHSA-f747-wqq2-4rg3

SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability. Due to this, an unauthenticated attacker could craft a URL embedded with malicious script and trick an unauthenticated victim to click on it to execute the script. Upon successful exploitation, the attacker could access and modify limited information within the scope of victim's browser. This vulnerability has no impact on availability of the application.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-16305

Уязвимость программной интеграционной платформы SAP NetWeaver Application Server ABAP, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

CVSS3: 6.1
0%
Низкий
6 месяцев назад

Уязвимостей на страницу