VDB

CESS-2025-42980

CESS-2025-42980 PUBLISHED CVSS 9.1 CRITICAL

SAP NetWeaver Enterprise Portal Federated Portal Network is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.

Risk Scores

CVSS 3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Timeline

  • Jul 8, 2025 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›