CVE-2025-42975 – SAP NetWeaver Application Server ABAP Cross-Site Scripting (XSS)

CVE ID : CVE-2025-42975

Published : Aug. 12, 2025, 3:15 a.m. | 29 minutes ago

Description : SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim’s browser, allowing the attacker to access and/or modify information related to the web client without affecting availability.

Severity: 6.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…