Stored Cross-Site Scripting Vulnerability in SAP NetWeaver Application Server Java

CVE-2025-0054

What is CVE-2025-0054?

A stored cross-site scripting vulnerability exists in SAP NetWeaver Application Server Java, allowing attackers with basic user privileges to inject malicious JavaScript payloads. When executed, these payloads can compromise the security of users' web browsers, enabling attackers to read or manipulate information on affected web pages. This vulnerability highlights the critical need for robust input validation in web applications to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References