HTML Injection Vulnerability in SAP NetWeaver Application Server ABAP

CVE-2025-42945

What is CVE-2025-42945?

The SAP NetWeaver Application Server ABAP is susceptible to an HTML injection vulnerability that allows an attacker to craft a specially designed URL containing malicious scripts. If a victim, with an active user session, clicks on this URL, they may inadvertently execute the malicious script. This exploit can result in the attacker gaining limited access to manipulate data within the application. However, the availability of the application remains unaffected, meaning normal operations can continue despite this security gap.

References