XSS in Sap Se Netweaver (Abap Keyword Documentation)
CVE-2025-31325
Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The vulnerability does not affect data integrity or availability and operates entirely within the context of the client's browser.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (18.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N.
Affected products
- Sap_se Sap Netweaver (Abap Keyword Documentation) — versions SAP_BASIS 758
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-31325?
- CVE-2025-31325 is a medium-severity vulnerability in Sap Se Netweaver (Abap Keyword Documentation), classified under Cross-site Scripting. CVSS score: 5.8/10. Published 2025-06-10.
- How severe is CVE-2025-31325?
- Medium severity. CVSS v3 base score is 5.8 out of 10.