PT-2025-10667 · Sap · Sap Netweaver Application Server Abap

Published 2025-03-11 · Updated 2025-03-24 · CVE-2025-25242

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP (affected versions not specified)

Description The issue allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-03622

CVE-2025-25242

Affected Products

Sap Netweaver Application Server Abap

References · 8

• https://bdu.fstec.ru/vul/2025-03622 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-25242 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html · Note
• https://me.sap.com/notes/3562390 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/cvetracker/18865 · Telegram Post
• https://t.me/cvedetector/20023 · Telegram Post
• https://twitter.com/RedTeamNewsBlog/status/1904243740027273693 · Twitter Post