VDB
GCVE-110-NCSC-2025-186
GCVE-110-NCSC-2025-186
Advisory PublishedCVSS 5.4/10
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Weaknesses (CWE)
CWE-918Server-Side Request Forgery (SSRF)CWE-862Missing AuthorizationCWE-346Origin Validation ErrorCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-590Free of Memory not on the Heap
Risk Scores
CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| SAP | vers:unknown/710.750 | — | — |
| SAP | vers:unknown/b1_on_hana 10.0 | — | — |
| SAP | vers:unknown/105 | — | — |
| SAP | vers:unknown/702 | — | — |
| SAP | vers:unknown/107 | — | — |
| SAP | vers:unknown/754 | — | — |
| SAP | vers:unknown/7.50 | — | — |
| SAP | vers:unknown/2025 | — | — |
| SAP | vers:unknown/753 | — | — |
| SAP | vers:unknown/752 | — | — |
| SAP | vers:unknown/9.15 | — | — |
| SAP | vers:unknown/740 | — | — |
| SAP | vers:unknown/108 | — | — |
| SAP | vers:unknown/914 | — | — |
| SAP | vers:unknown/grcpinwv1100_700 | — | — |
| SAP | vers:unknown/757 | — | — |
| SAP | vers:unknown/2027 | — | — |
| SAP | vers:unknown/701 | — | — |
| SAP | vers:unknown/s4core104 | — | — |
| SAP | vers:unknown/sap_bw 750 | — | — |
| SAP | vers:unknown/sap_basis758 | — | — |
| SAP | vers:unknown/9.14 | — | — |
| SAP | vers:unknown/v1100_731 | — | — |
| SAP | vers:unknown/pi_basis 2006_1_700 | — | — |
| SAP | vers:unknown/s4core106 | — | — |
| SAP | vers:unknown/7.89 | — | — |
| SAP | vers:unknown/758 | — | — |
| SAP | vers:unknown/enterprise 430 | — | — |
| SAP | vers:unknown/915 | — | — |
| SAP | vers:unknown/106 | — | — |
| SAP | vers:unknown/756 | — | — |
| SAP | vers:unknown/7.93 | — | — |
| SAP | vers:unknown/751 | — | — |
| SAP | vers:unknown/755 | — | — |
| SAP | vers:unknown/731 | — | — |
| SAP | vers:unknown/sap-m-bo 10.0 | — | — |
Browse GCVE Records
72,096 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.