Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-42975

Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to access and/or modify information related to the web client without affecting availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver Application Server ABAP (BIC Document)

Default version status: unaffected

  • S4COREOP 104affected
  • 105affected
  • 106affected
  • 107affected
  • 108affected
  • SEM-BW 600affected
  • 602affected
  • 603affected
  • 604affected
  • 605affected
  • 634affected
  • 736affected
  • 746affected
  • 747affected
  • 748affected

References