VDB
BDU%3A2025-14334
BDU%3A2025-14334
PUBLISHED
CVSS 9 CRITICAL
Уязвимость программных интеграционных платформ SAP NetWeaver AS Java, связанная с неверным управлением генерацией кода, позволяющая нарушителю загрузить произвольный файл
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP | SAP NetWeaver AS Java |
Timeline
- Nov 17, 2025 CVE Published
References
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news/september-2025.html url
- https://me.sap.com/notes/3643865 url
- https://www.theregister.com/2025/09/10/microsoft_patch_tuesday url
- https://www.bleepingcomputer.com/news/security/sap-fixes-maximum-severity-netweaver-command-execution-flaw url
- https://thehackernews.com/2025/09/sap-patches-critical-netweaver-cvss-up.html url
- https://securityaffairs.com/182040/security/sap-september-2025-patch-day-fixed-4-critical-flaws.html url