Beveiligingsadvies

CVE-2025-42872

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-09 02:13:55

Laatst bijgewerkt 2025-12-09 16:02:40

Toegewezen door sap

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability.

← Alle CVE's bekijken Bekijk op cve.org ↗