VDB
GCVE-110-NCSC-2025-119
GCVE-110-NCSC-2025-119
Advisory PublishedCVSS 9.8/10
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Weaknesses (CWE)
CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-732Incorrect Permission Assignment for Critical ResourceCWE-94Improper Control of Generation of Code ('Code Injection')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-319Cleartext Transmission of Sensitive InformationCWE-862Missing AuthorizationCWE-918Server-Side Request Forgery (SSRF)CWE-35Path Traversal: '.../...//'CWE-787Out-of-bounds WriteCWE-921Storage of Sensitive Data in a Mechanism without Access ControlCWE-434Unrestricted Upload of File with Dangerous TypeCWE-472External Control of Assumed-Immutable Web ParameterCWE-352Cross-Site Request Forgery (CSRF)CWE-863Incorrect AuthorizationCWE-277Insecure Inherited Permissions
Risk Scores
CVSS 3.1
9.8/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Apache | vers:unknown/10.1.11 | — | — |
| SAP | vers:unknown/1808 | — | — |
| SAP | vers:unknown/sap_basis 701 | — | — |
| SAP_SE | vers:unknown/107 | — | — |
| sap | vers:unknown/1.0 | — | — |
| SAP | vers:unknown/6.0 | — | — |
| Apache | vers:unknown/10.1.14 | — | — |
| Apache | vers:unknown/10.1.19 | — | — |
| SAP | vers:unknown/7.53 | — | — |
| SAP | vers:unknown/dmis 2011_1_700 | — | — |
| SAP | vers:unknown/7.11 | — | — |
| SAP | vers:unknown/7.51 | — | — |
| SAP | vers:unknown/702 | — | — |
| SAP | vers:unknown/754 | — | — |
| SAP | vers:unknown/7.50 | — | — |
| SAP_SE | vers:unknown/103 | — | — |
| SAP | vers:unknown/2011_1_730 | — | — |
| SAP | vers:unknown/dmis_2011_1_700 | — | — |
| Apache | vers:unknown/>=10.1.0 milestone1|<=10.1.33 | — | — |
| SAP | vers:unknown/753 | — | — |
| SAP | vers:unknown/6.18 | — | — |
| SAP | vers:unknown/com_cloud 2211 | — | — |
| SAP_SE | vers:unknown/2011_1_730 | — | — |
| SAP | vers:unknown/sap_basis 700 | — | — |
| SAP | vers:unknown/6.7 | — | — |
| SAP | vers:unknown/752 | — | — |
| Apache | vers:unknown/10.1.17 | — | — |
| SAP | vers:unknown/7.40 | — | — |
| Apache | vers:unknown/<9.0.98 | — | — |
| sap | vers:unknown/3.00 | — | — |
| SAP | vers:unknown/2011_1_731 | — | — |
| SAP_SE | vers:unknown/105 | — | — |
| SAP | vers:unknown/1905 | — | — |
| Apache | vers:unknown/10.1.23 | — | — |
| Apache | vers:unknown/10.1.16 | — | — |
| SAP | vers:unknown/7.30 | — | — |
| SAP | vers:unknown/700 | — | — |
| Apache | vers:unknown/10.1.21 | — | — |
| Apache | vers:unknown/10.1.22 | — | — |
| SAP | vers:unknown/2205 | — | — |
| SAP | vers:unknown/75c | — | — |
| Apache | vers:unknown/10.1.20 | — | — |
| SAP_SE | vers:unknown/dmis2011_1_700 | — | — |
| SAP | vers:unknown/740 | — | — |
| SAP | vers:unknown/2105 | — | — |
| SAP | vers:unknown/2005 | — | — |
| SAP | vers:unknown/7.52 | — | — |
| SAP_SE | vers:unknown/2011_1_731 | — | — |
| SAP_SE | vers:unknown/lm-sld 7.5 | — | — |
| sap | vers:unknown/* | — | — |
| SAP | vers:unknown/sap_basis 740 | — | — |
| SAP | vers:unknown/6.04 | — | — |
| SAP | vers:unknown/10.0 | — | — |
| SAP | vers:unknown/757 | — | — |
| SAP | vers:unknown/2205 hy_com | — | — |
| SAP | vers:unknown/2.00 | — | — |
| SAP | vers:unknown/7.02 | — | — |
| SAP | vers:unknown/2011_1_710 | — | — |
| SAP | vers:unknown/1811 | — | — |
| SAP | vers:unknown/3.0 | — | — |
| SAP | vers:unknown/6.16 | — | — |
| SAP | vers:unknown/7.00 | — | — |
| SAP | vers:unknown/750 | — | — |
| SAP | vers:unknown/7.5 | — | — |
| SAP | vers:unknown/1010 | — | — |
| SAP | vers:unknown/6.06 | — | — |
| SAP | vers:unknown/701 | — | — |
| SAP_SE | vers:unknown/106 | — | — |
| SAP_SE | vers:unknown/s4core102 | — | — |
| SAP | vers:unknown/8.0 | — | — |
| SAP | vers:unknown/unknown | — | — |
| SAP | vers:unknown/10.0.0.1933 | — | — |
| SAP_SE | vers:unknown/108 | — | — |
| SAP | vers:unknown/6.05 | — | — |
| Apache | vers:unknown/10.1.0 | — | — |
| Apache | vers:unknown/<11.0.2 | — | — |
| SAP | vers:unknown/sap_basis 702 | — | — |
| SAP | vers:unknown/7.0 | — | — |
| SAP | vers:unknown/6.03 | — | — |
| SAP | vers:unknown/none | — | — |
| Apache | vers:unknown/10.1.10 | — | — |
| SAP | vers:unknown/* | — | — |
| Apache | vers:unknown/10.1.1 | — | — |
| Apache | vers:unknown/10.1.13 | — | — |
| ATOSS | vers:unknown/unknown | — | — |
| Apache | vers:unknown/<10.1.34 | — | — |
| SAP | vers:unknown/com_cloud 2211|hy_com 2205 | — | — |
| Apache | vers:unknown/>=9.0.0 milestone1|<=9.0.97 | — | — |
| SAP | vers:unknown/sap_basis 731 | — | — |
| Amazon | vers:unknown/unknown | — | — |
| Apache | vers:unknown/10.1.12 | — | — |
| sap | vers:unknown/2.0 | — | — |
| SAP | vers:unknown/2011 | — | — |
| SAP | vers:unknown/7.31 | — | — |
| SAP | vers:unknown/hy_com 2205 | — | — |
| SAP_SE | vers:unknown/104 | — | — |
| SAP | vers:unknown/756 | — | — |
| SAP | vers:unknown/2001 zh | — | — |
| Apache | vers:unknown/10.1.15 | — | — |
| SAP | vers:unknown/7.20 | — | — |
| SAP | vers:unknown/7.01 | — | — |
| Apache | vers:unknown/>=11.0.0 milestone1|<=11.0.1 | — | — |
| SAP | vers:unknown/751 | — | — |
| SAP | vers:unknown/6.17 | — | — |
| SAP | vers:unknown/2.0 | — | — |
| SAP | vers:unknown/10.1 | — | — |
| SAP | vers:unknown/755 | — | — |
| sap | vers:unknown/3.0 | — | — |
| SAP | vers:unknown/7.10 | — | — |
| SAP | vers:unknown/731 | — | — |
| Apache | vers:unknown/10.1.2 | — | — |
| SAP_SE | vers:unknown/2011_1_710 | — | — |
| SAP | vers:unknown/2211 | — | — |
| Apache | vers:unknown/10.1.18 | — | — |
| SAP | vers:unknown/720 | — | — |
Aliases
CVE-2024-56337CVE-2025-0064CVE-2025-23186CVE-2025-26653CVE-2025-26654CVE-2025-26657CVE-2025-27428CVE-2025-27429CVE-2025-27430CVE-2025-27435CVE-2025-27437CVE-2025-30013CVE-2025-30014CVE-2025-30015CVE-2025-30016CVE-2025-30017CVE-2025-31324CVE-2025-31327CVE-2025-31328CVE-2025-31330CVE-2025-31331CVE-2025-31332CVE-2025-31333
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.