Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-42980 EUVD-2025-20333GHSA-pww9-mrfm-gr5r

Insecure Deserialization in SAP NetWeaver Enterprise Portal Federated Portal Network

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by sap

Description

SAP NetWeaver Enterprise Portal Federated Portal Network is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Enterprise Portal Federated Portal Network EP-RUNTIME 7.50 —

Advisories 2

References