CVE-2025-42872: Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Published Dec 9, 2025

Updated

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability.

Affected Software

1 affected component

SAP NetWeaver Enterprise Portal

Event History

Dec 9, 2025

CVE Published

via MITRE·02:13 AM

Data Sourced

via MITRE·02:13 AM

DescriptionSeverity

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-42872?

CVE-2025-42872 is classified as a moderate severity vulnerability due to the potential for unauthorized script execution.

How do I fix CVE-2025-42872?

To mitigate CVE-2025-42872, apply the latest security patches provided by SAP for the NetWeaver Enterprise Portal.

Who is affected by CVE-2025-42872?

CVE-2025-42872 affects users of SAP NetWeaver Enterprise Portal who are not adequately protecting against Cross-Site Scripting vulnerabilities.

What types of attacks are possible with CVE-2025-42872?

An attacker can exploit CVE-2025-42872 by injecting malicious scripts to steal session cookies and tokens from unsuspecting users.

Can CVE-2025-42872 be exploited without authentication?

Yes, CVE-2025-42872 can be exploited by unauthenticated attackers, making it particularly dangerous.