Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-25242 EUVD-2025-7662GHSA-chhf-863p-8gx2

Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP

Published Mar 11, 2025 · Updated Mar 11, 2025 · Assigned by sap

Description

SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Application Server ABAP SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 914 —

Advisories 2

References