Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-42981 EUVD-2025-20332GHSA-263g-f2m6-f7m9

Multiple vulnerabilities in SAP NetWeaver Application Server ABAP

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by sap

Description

Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at a location not properly sanitized. When a victim clicks on this link, the script executes within the victim's browser, redirecting them to a site controlled by the attacker. This allows the attacker to access and/or modify restricted information related to the web client. While the vulnerability poses no impact on data availability, it presents a considerable risk to confidentiality and integrity.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Application Server ABAP SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816 —

Advisories 2

References