VDB
GCVE-110-NCSC-2025-149
GCVE-110-NCSC-2025-149
Advisory PublishedCVSS 9.1/10
SAP heeft meerdere kwetsbaarheden verholpen in diverse SAP producten, zoals NetWeaver, NetWeaver Visual Composer, SAP GUI, pcde, Business Objects, HANA en andere componenten.
Weaknesses (CWE)
CWE-862Missing AuthorizationCWE-502Deserialization of Untrusted DataCWE-611Improper Restriction of XML External Entity ReferenceCWE-94Improper Control of Generation of Code ('Code Injection')CWE-732Incorrect Permission Assignment for Critical ResourceCWE-749Exposed Dangerous Method or FunctionCWE-141Improper Neutralization of Parameter/Argument DelimitersCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-472External Control of Assumed-Immutable Web ParameterCWE-256Plaintext Storage of a PasswordCWE-434Unrestricted Upload of File with Dangerous Type
Risk Scores
CVSS 3.1
9.1/10
Critical · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| SAP | vers:unknown/105 | — | — |
| SAP | vers:unknown/107 | — | — |
| SAP | vers:sap/7.50 for visual composer development server | — | — |
| SAP | vers:unknown/7.50 | — | — |
| SAP | vers:unknown/2025 | — | — |
| SAP | vers:unknown/sbopdsjobserver4.3 | — | — |
| SAP | vers:unknown/sap_basis757 | — | — |
| SAP | vers:unknown/604 | — | — |
| SAP | vers:unknown/sap_basis756 | — | — |
| SAP | vers:unknown/bc-fes-gui8.00 | — | — |
| SAP | vers:unknown/616 | — | — |
| SAP | vers:unknown/enterprise430 | — | — |
| SAP | vers:unknown/108 | — | — |
| SAP | vers:unknown/757 | — | — |
| SAP | vers:unknown/712 | — | — |
| SAP | vers:unknown/608 | — | — |
| SAP | vers:unknown/srm_server7.14 | — | — |
| SAP | vers:unknown/713 | — | — |
| SAP | vers:unknown/618 | — | — |
| SAP | vers:unknown/2027 | — | — |
| SAP | vers:unknown/s4core_102 | — | — |
| SAP | vers:unknown/sap_basis758 | — | — |
| SAP | vers:unknown/104 | — | — |
| SAP | vers:unknown/ctnr-dme-podfoundation-ms1.0 | — | — |
| SAP | vers:unknown/unknown | — | — |
| SAP | vers:unknown/vcframework7.50 | — | — |
| SAP | vers:unknown/714 | — | — |
| SAP | vers:unknown/758 | — | — |
| SAP | vers:unknown/s4coreop_104 | — | — |
| SAP | vers:unknown/s4core_103 | — | — |
| SAP | vers:unknown/* | — | — |
| SAP | vers:unknown/srm_mdm_cat7.52 | — | — |
| SAP | vers:unknown/sap_gwfnd752 | — | — |
| SAP | vers:unknown/106 | — | — |
| SAP | vers:unknown/s4coreop_105 | — | — |
| SAP | vers:unknown/617 | — | — |
| SAP | vers:unknown/756 | — | — |
Browse GCVE Records
73,873 records in the GCVE database · Updated July 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.