PT-2025-24584 · Sap · Sap Netweaver
CVE-2025-31325
·
Publicado
2025-06-10
·
Atualizado
2025-06-10
CVSS v3.1
5.8
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver (affected versions not specified)
Description
The issue is related to a Cross-Site Scripting vulnerability. An unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The issue does not affect data integrity or availability and operates entirely within the context of the client's browser.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sap Netweaver