Skip to content
OpenAdvisories

Product · SAP_SE

SAP NetWeaver Application Server Java

12 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-0054 Public exploit

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java

    SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be la…