CVE 2.7 LOW

Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)_CVE-2025-42883

2.7 / 10
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Description

Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low impact on the integrity of the application.

Basic Information

ID CVE-2025-42883
Source sap
Published Nov 11, 2025 at 00:13

Affected Product

Vendor SAP_SE
Product SAP NetWeaver Application Server for ABAP (Migration Workbench)
Version SAP_BASIS 700
Affected Versions SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 700
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 701
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 702
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 731
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 740
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 750
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 751
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 752
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 753
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 754
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 755
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 756
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 757
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 758
SAP_SE SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 816

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.