Логотип exploitDog
bind:CVE-2025-42948
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-42948

Количество 3

Количество 3

nvd логотип

CVE-2025-42948

6 месяцев назад

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website�s page generation, resulting in the creation of malicious content. When this malicious content gets executed, the attacker could gain the ability to access/modify information within the scope of victim�s browser.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-7fx4-gx8w-xchc

6 месяцев назад

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website�s page generation, resulting in the creation of malicious content. When this malicious content gets executed, the attacker could gain the ability to access/modify information within the scope of victim�s browser.

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2025-16304

6 месяцев назад

Уязвимость программной интеграционной платформы SAP NetWeaver ABAP, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-42948

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website�s page generation, resulting in the creation of malicious content. When this malicious content gets executed, the attacker could gain the ability to access/modify information within the scope of victim�s browser.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
github логотип
GHSA-7fx4-gx8w-xchc

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website�s page generation, resulting in the creation of malicious content. When this malicious content gets executed, the attacker could gain the ability to access/modify information within the scope of victim�s browser.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-16304

Уязвимость программной интеграционной платформы SAP NetWeaver ABAP, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 6.1
0%
Низкий
6 месяцев назад

Уязвимостей на страницу