PT-2025-32604 · Sap · Sap Netweaver Application Server Abap

Published 2025-08-11 · Updated 2025-08-12 · CVE-2025-42942

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP (affected versions not specified)

Description: SAP NetWeaver Application Server for ABAP is susceptible to a cross-site scripting issue. An unauthenticated attacker can create a URL containing a malicious script and deceive an unauthenticated victim into clicking it, leading to script execution. Successful exploitation allows the attacker to access and modify limited information within the victim’s browser. This issue does not impact application availability.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-16305

CVE-2025-42942

Affected Products

Sap Netweaver Application Server Abap

References · 8

• https://bdu.fstec.ru/vul/2025-16305 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-42942 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2025.html · Note
• https://twitter.com/CVEnew/status/1955101089977467225 · Twitter Post
• https://me.sap.com/notes/3597355 · Note
• https://t.me/CVEtracker/29730 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/VulmonFeeds/status/1955157988429164901 · Twitter Post