AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-42901

MEDIUM · CVSS 5.4 EPSS 0.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-10-14 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-42901
Severity
MEDIUM
CVSS
5.4
EPSS
0.21%
Java

Original NVD Description

SAP Application Server for ABAP allows an authenticated attacker to store malicious JavaScript payloads which could be executed in victim user's browser when accessing the affected functionality of BAPI explorer. This has low impact on confidentiality and integrity with no impact on availability of the application.