PT-2025-24584 · Sap · Sap Netweaver

CVE-2025-31325

·

Publicado

2025-06-10

·

Atualizado

2025-06-10

CVSS v3.1

5.8

Média

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions SAP NetWeaver (affected versions not specified)
Description The issue is related to a Cross-Site Scripting vulnerability. An unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The issue does not affect data integrity or availability and operates entirely within the context of the client's browser.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-07442
CVE-2025-31325

Produtos afetados

Sap Netweaver