VDB
NCSC-2025-149
NCSC-2025-149
PUBLISHED
CVSS 9.100000381469727 CRITICAL
SAP heeft meerdere kwetsbaarheden verholpen in diverse SAP producten, zoals NetWeaver, NetWeaver Visual Composer, SAP GUI, pcde, Business Objects, HANA en andere componenten.
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP | vers:unknown/bc-fes-gui8.00 | |
| SAP | vers:unknown/sap_basis756 | |
| SAP | vers:unknown/sbopdsjobserver4.3 | |
| SAP | vers:unknown/757 | |
| SAP | vers:unknown/s4core_102 | |
| SAP | vers:unknown/713 | |
| SAP | vers:unknown/756 | |
| SAP | vers:unknown/sap_basis757 | |
| SAP | vers:unknown/618 | |
| SAP | vers:unknown/2027 | |
| SAP | vers:unknown/vcframework7.50 | |
| SAP | vers:unknown/617 | |
| SAP | vers:unknown/106 | |
| SAP | vers:unknown/758 | |
| SAP | vers:unknown/105 | |
| SAP | vers:unknown/608 | |
| SAP | vers:unknown/7.50 | |
| SAP | vers:unknown/ctnr-dme-podfoundation-ms1.0 | |
| SAP | vers:unknown/unknown | |
| SAP | vers:unknown/sap_gwfnd752 |
…and 17 more
Timeline
- May 13, 2025 CVE Published
- Sep 30, 2025 PoC Published
- Feb 4, 2026 PoC Published
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
- Mar 20, 2026 Security Advisory
References
- https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0149.json advisory
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news/may-2025.html advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-42999.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30018.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43010.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43000.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43011.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39592.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-42997.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43003.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43009.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43007.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31329.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43006.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43008.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43004.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26662.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43002.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-43005.json advisory
- https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31324.json advisory