Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform_CVE-2025-42948

{
    "lastseen": "",
    "description": "Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the websites page generation, resulting in the creation of malicious content. When this malicious content gets executed, the attacker could gain the ability to access/modify information within the scope of victims browser.",
    "published": "2025-08-12T02:08:17.608Z",
    "modified": "2025-08-12T02:08:17.608Z",
    "type": "cve",
    "title": "Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform",
    "source": "sap",
    "references": "https://me.sap.com/notes/3629871\nhttps://url.sap/sapsecuritypatchday",
    "id": "CVE-2025-42948",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79"
    ],
    "cvelist": null,
    "sourceData": "SAP_SE SAP NetWeaver ABAP Platform S4CRM 100\nSAP_SE SAP NetWeaver ABAP Platform 200\nSAP_SE SAP NetWeaver ABAP Platform 204\nSAP_SE SAP NetWeaver ABAP Platform 205\nSAP_SE SAP NetWeaver ABAP Platform 206\nSAP_SE SAP NetWeaver ABAP Platform S4CEXT 107\nSAP_SE SAP NetWeaver ABAP Platform 108\nSAP_SE SAP NetWeaver ABAP Platform 109\nSAP_SE SAP NetWeaver ABAP Platform BBPCRM 713\nSAP_SE SAP NetWeaver ABAP Platform 714",
    "sourceHref": "",
    "cvss": {
        "score": 6.1,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "SAP NetWeaver ABAP Platform",
    "version": "S4CRM 100",
    "vendor": "SAP_SE",
    "ai_description": "Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform affecting multiple versions, allowing attackers to inject malicious scripts via crafted links.",
    "ai_severity": "MEDIUM",
    "ai_vendor": "SAP",
    "ai_product": "NetWeaver ABAP Platform",
    "ai_version": "S4CRM 100, 200, 204, 205, 206, S4CEXT 107, 108, 109, BBPCRM 713, 714",
    "ai_score": 6.1
}