HTML Injection Vulnerability in SAP NetWeaver Application Server ABAP

CVE-2025-42945

What is CVE-2025-42945?

The SAP NetWeaver Application Server ABAP is susceptible to an HTML injection vulnerability that allows an attacker to craft a specially designed URL containing malicious scripts. If a victim, with an active user session, clicks on this URL, they may inadvertently execute the malicious script. This exploit can result in the attacker gaining limited access to manipulate data within the application. However, the availability of the application remains unaffected, meaning normal operations can continue despite this security gap.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References