Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform_CVE-2025-42938

{
    "lastseen": "",
    "description": "Due to a Cross-Site Scripting (XSS) vulnerability in the SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website\ufffds page generation, resulting in the creation of malicious content. When executed, this content allows the attacker to access or modify information within the victim's browser scope, impacting the confidentiality and integrity\ufffdwhile availability remains unaffected.",
    "published": "2025-09-09T02:11:33.755Z",
    "modified": "2025-09-09T02:11:33.755Z",
    "type": "cve",
    "title": "Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform",
    "source": "sap",
    "references": "https://me.sap.com/notes/3629325\nhttps://url.sap/sapsecuritypatchday",
    "id": "CVE-2025-42938",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79"
    ],
    "cvelist": null,
    "sourceData": "SAP_SE SAP NetWeaver ABAP Platform S4CRM 100\nSAP_SE SAP NetWeaver ABAP Platform 200\nSAP_SE SAP NetWeaver ABAP Platform 204\nSAP_SE SAP NetWeaver ABAP Platform 205\nSAP_SE SAP NetWeaver ABAP Platform 206\nSAP_SE SAP NetWeaver ABAP Platform S4CEXT 109\nSAP_SE SAP NetWeaver ABAP Platform BBPCRM 713\nSAP_SE SAP NetWeaver ABAP Platform 714",
    "sourceHref": "",
    "cvss": {
        "score": 6.1,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "SAP NetWeaver ABAP Platform",
    "version": "S4CRM 100",
    "vendor": "SAP_SE",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}