Beveiligingsadvies

CVE-2025-42884

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-11 00:14:02

Laatst bijgewerkt 2025-11-12 20:11:40

Toegewezen door sap

CVSS-score 6.5

Status PUBLISHED

Beschrijving

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There is no impact on availability.

← Alle CVE's bekijken Bekijk op cve.org ↗