CSRF Vulnerability in SAP NetWeaver Application Server for ABAP

CVE-2025-42908

What is CVE-2025-42908?

A Cross-Site Request Forgery (CSRF) vulnerability in the SAP NetWeaver Application Server for ABAP allows authenticated attackers to craft requests that can bypass critical transaction authorization checks. By exploiting this vulnerability, attackers can initiate transactions directly through the session manager, gaining access to restricted functionalities without proper permissions. This could jeopardize the integrity and confidentiality of sensitive data while having no direct impact on system availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References