Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2025-42883

Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low impact on the integrity of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench)

Default version status: unaffected

  • SAP_BASIS 700affected
  • SAP_BASIS 701affected
  • SAP_BASIS 702affected
  • SAP_BASIS 731affected
  • SAP_BASIS 740affected
  • SAP_BASIS 750affected
  • SAP_BASIS 751affected
  • SAP_BASIS 752affected
  • SAP_BASIS 753affected
  • SAP_BASIS 754affected
  • SAP_BASIS 755affected
  • SAP_BASIS 756affected
  • SAP_BASIS 757affected
  • SAP_BASIS 758affected
  • SAP_BASIS 816affected

References