SAP SE SAP NetWeaver Abap Platform vulnerabilities

2 CVEs affecting SAP SE SAP NetWeaver Abap Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-42938, published 2025-09-09.

More from SAP SE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-42948, published 2025-08-12. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user…
• CVE-2025-42938, published 2025-09-09. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Due to a Cross-Site Scripting (XSS) vulnerability in the SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated…