Skip to content
SecondTuesday

SAP Note 3662622

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

MediumCVSS 6.1SAP NetWeaver Enterprise Portal
CVE(s)
CVE-2025-42872
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products and versions

Appears in

Patch Days listing this note, newest first.

Open note on SAP for Me (SAP login required)