CVE-2025-25242CWE-79

Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP

Medium · published March 11, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
16.0
In the wild
Unconfirmed
What it is

SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-03-11T00:32Z
EPSS history
Timeline
  • 11 MAR 00:32Z
    Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP
    cvelistv5