CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-42872
Severity
MEDIUM
CVSS
6.1
EPSS
0.23%
Original NVD Description
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability.