Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-42962

Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Business Warehouse (Business Explorer Web) allows an attacker to create a malicious link. If an authenticated user clicks on this link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business Warehouse (Business Explorer Web 3.5 loading animation)

Default version status: unaffected

  • DW4CORE 100affected
  • 200affected
  • 300affected
  • 400affected
  • 916affected
  • SAP_BW 730affected
  • 731affected
  • 740affected
  • 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 756affected
  • 757affected
  • 758affected

References