VDB

GCVE-110-NCSC-2025-219

GCVE-110-NCSC-2025-219
Advisory PublishedCVSS 9.9/10
Vulnetix · Advisory published July 9, 2025
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses (CWE)

CWE-787Out-of-bounds WriteCWE-94Improper Control of Generation of Code ('Code Injection')CWE-502Deserialization of Untrusted DataCWE-308Use of Single-factor AuthenticationCWE-862Missing AuthorizationCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-266Incorrect Privilege AssignmentCWE-601URL Redirection to Untrusted Site ('Open Redirect')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-922Insecure Storage of Sensitive InformationCWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)CWE-918Server-Side Request Forgery (SSRF)CWE-940Improper Verification of Source of a Communication ChannelCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')

Risk Scores

CVSS 3.1
9.9/10
Critical · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
SAPvers:unknown/400
SAPvers:unknown/sap_basis 914
SAPvers:unknown/sap_basis 701
SAPvers:unknown/sap_bw700
SAPvers:unknown/702
SAPvers:unknown/107
SAPvers:unknown/s4core102
SAPvers:unknown/754
SAPvers:unknown/103
SAPvers:unknown/7.50
SAPvers:unknown/753
SAPvers:unknown/engineapi7.50
SAPvers:unknown/sap_basis 751
SAPvers:unknown/sap_basis 700
SAPvers:unknown/752
SAPvers:unknown/4coreop 105
SAPvers:unknown/sap_bw730
SAPvers:unknown/bc-fes-gui8.00
SAPvers:unknown/sap_bw 700
SAPvers:unknown/sap_basis 754
SAPvers:unknown/sap_basis 758
SAPvers:unknown/740
SAPvers:unknown/scm700
SAPvers:unknown/cm_700
SAPvers:unknown/enterprise430
SAPvers:unknown/108
SAPvers:unknown/lmnwabasicapps7.50
SAPvers:unknown/sap_basis 740
SAPvers:unknown/cmapo_713
SAPvers:unknown/757
SAPvers:unknown/st-pi2008_1_700
SAPvers:unknown/sap_basis 753
SAPvers:unknown/712
SAPvers:unknown/s4coreop105
SAPvers:unknown/7.22ext
SAPvers:unknown/sap_car7.53
SAPvers:unknown/750
SAPvers:unknown/sap_basis 915
SAPvers:unknown/dw4core_100
SAPvers:unknown/2027
SAPvers:unknown/701
SAPvers:unknown/4core_102
SAPvers:unknown/104
SAPvers:unknown/816
SAPvers:unknown/sap_basis 750
SAPvers:unknown/sap_basis 702
SAPvers:unknown/sap_ 7.53
SAPvers:unknown/cm 700
SAPvers:unknown/714
SAPvers:unknown/758
SAPvers:unknown/sap_bw_virtual_comp701
SAPvers:unknown/300
SAPvers:unknown/sap_basis 731
SAPvers:unknown/106
SAPvers:unknown/enterpriseclienttools430
SAPvers:unknown/dw4core100
SAPvers:unknown/sap_basis 752
SAPvers:unknown/4core 102
SAPvers:unknown/cmapo 713
SAPvers:unknown/756
SAPvers:unknown/dw4core 100
SAPvers:unknown/sap_bw_virtual_comp 701
SAPvers:unknown/scmapo713
SAPvers:unknown/4coreop_105
SAPvers:unknown/j2ee-apps7.50
SAPvers:unknown/751
SAPvers:unknown/sap_basis 755
SAPvers:unknown/755
SAPvers:unknown/sap_basis 757
SAPvers:unknown/sbop_ds_management_console4.3
SAPvers:unknown/731
SAPvers:unknown/sap_basis 756
SAPvers:unknown/200

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›