Skip to content
OpenAdvisories

Product · SAP

SAP Application Server for ABAP (BAPI Browser)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-42901

    Code Injection vulnerability in SAP Application Server for ABAP (BAPI Browser)

    SAP Application Server for ABAP allows an authenticated attacker to store malicious JavaScript payloads which could be executed in victim user's browser when accessing the affected functionality of BAPI explorer. This has low impact on confidentiality and int…

    SAP SAP Application Server for ABAP (BAPI Browser)