Beveiligingsadvies

CVE-2025-0057

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-14 00:08:50

Laatst bijgewerkt 2025-01-14 15:01:00

Toegewezen door sap

CVSS-score 4.8

Status PUBLISHED

Beschrijving

SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the attacker can read and modify information within the scope of victim's web browser.

← Alle CVE's bekijken Bekijk op cve.org ↗