CVE-2025-42945 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

SAP NetWeaver Application Server ABAP has HTML injection vulnerability. Due to this, an attacker could craft a URL with malicious script as payload and trick a victim with active user session into executing it. Upon successful exploit, this vulnerability could lead to limited access to data or its manipulation. There is no impact on availability.

Reserved 2025-04-16 | Published 2025-08-12 | Updated 2025-08-12 | Assigner sap

MEDIUM: 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Problem types

CWE-94: Improper Control of Generation of Code

Product status

Default status

unaffected

KRNL64UC 7.53

affected

KERNEL 7.53

affected

7.54

affected

7.77

affected

7.89

affected

7.93

affected

References

me.sap.com/notes/3585491

url.sap/sapsecuritypatchday

cve.org (CVE-2025-42945)

nvd.nist.gov (CVE-2025-42945)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-42945

Support options

Helpdesk Chat, Email, Knowledgebase