Filtered by vendor Sap Subscriptions
Filtered by product Netweaver Application Server Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-42975 1 Sap 5 Application Server, Netweaver, Netweaver Abap and 2 more 2025-08-13 6.1 Medium
SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to access and/or modify information related to the web client without affecting availability.
CVE-2015-7968 1 Sap 1 Netweaver Application Server 2024-11-21 4.3 Medium
nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.