CVE-2025-25242

Summary

CVE-2025-25242 is a vulnerability affecting SAP NetWeaver Application Server ABAP. Malicious scripts can be executed in the application, resulting in a Cross-Site Scripting (XSS) issue. This vulnerability does not impact the application's availability but can have minor consequences on its confidentiality and integrity. Attackers can take advantage of this flaw to inject malicious code into web pages, deceiving users into disclosing sensitive information or executing unintended actions. Microsoft advises users to apply the available patches as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.