CVE-2025-0057
SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the attacker can read and modify information within the scope of victim's web browser.
- Score
- CVSS 3.1 4.8 Medium
- Status
- Deferred - cna@sap.com
- Published
- 2025-01-14
- Last modified
- 2025-01-14
- Weaknesses
- CWE-434
Affected products
References
- https://me.sap.com/notes/3514421
- https://url.sap/sapsecuritypatchday
