CSRF Vulnerability in SAP NetWeaver Application Server for ABAP

CVE-2025-42908

What is CVE-2025-42908?

A Cross-Site Request Forgery (CSRF) vulnerability in the SAP NetWeaver Application Server for ABAP allows authenticated attackers to craft requests that can bypass critical transaction authorization checks. By exploiting this vulnerability, attackers can initiate transactions directly through the session manager, gaining access to restricted functionalities without proper permissions. This could jeopardize the integrity and confidentiality of sensitive data while having no direct impact on system availability.

References