ue to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website�s page generation, resulting in the creation of malicious content. When this malicious content gets executed, the attacker could gain the ability to access/modify information within the scope of victim�s browser.
No configuration.
12 Aug 2025, 14:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-08-12 03:15
Updated : 2025-08-12 14:25
NVD link : CVE-2025-42948
Mitre link : CVE-2025-42948
CVE.ORG link : CVE-2025-42948
JSON object : View
No product.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')