File Upload Vulnerability in SAP NetWeaver Application Server for ABAP from SAP
CVE-2025-42883

2.7LOW

What is CVE-2025-42883?

The Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP contains a critical security flaw where a malware scan is not triggered when administrative users upload files. This oversight allows for the potential upload of malicious files by attackers possessing administrative privileges. Consequently, the integrity of the application may be compromised, underscoring the need for immediate remediation measures to enhance security protocols against unauthorized file uploads.

Affected Version(s)

SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 700

SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 701

SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 702

References

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.