Cross-Site Scripting Vulnerability in SAP NetWeaver Application Server ABAP

CVE-2025-42975

What is CVE-2025-42975?

The SAP NetWeaver Application Server ABAP contains a cross-site scripting vulnerability that enables an unauthenticated attacker to create a malicious URL link. If a victim interacts with this crafted link in the BIC Document application, it can execute harmful scripts within the victim's browser. This exploitation grants the attacker unauthorized access to manipulate or retrieve sensitive information associated with the web client, posing serious security risks for users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References