Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-42964 EUVD-2025-20345GHSA-522j-v7c6-wm47

Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

Published Jul 8, 2025 · Updated Feb 26, 2026 · Assigned by sap

Description

SAP NetWeaver Enterprise Portal Administration is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Enterprise Portal Administration EP-RUNTIME 7.50 —

Advisories 2

References