CVE-2025-42980
SAP NetWeaver Enterprise Portal Federated Portal Network is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
- Score
- CVSS 3.1 9.1 Critical
- Status
- Deferred - cna@sap.com
- Published
- 2025-07-08
- Last modified
- 2025-07-08
- Weaknesses
- CWE-502
Affected products
References
- https://me.sap.com/notes/3620498
- https://url.sap/sapsecuritypatchday
