Cross-Site Scripting Vulnerability in SAP NetWeaver Application Server

CVE-2025-42942

What is CVE-2025-42942?

The SAP NetWeaver Application Server for ABAP is susceptible to a cross-site scripting vulnerability that permits an unauthenticated attacker to generate a malicious URL. When a victim inadvertently clicks the crafted link, it executes harmful scripts within the user's browser environment. This exploitation may allow the attacker to gain access to limited information and modify it within the victim’s browsing session, while not affecting the application's overall availability.

References