CVE-2025-42884

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There is no impact on availability.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3660969
https://url.sap/sapsecuritypatchday

Configurations

No configuration.

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) SAP NetWeaver Enterprise Portal permite a un atacante no autenticado inyectar propiedades de entorno JNDI o pasar una URL utilizada durante las operaciones de búsqueda JNDI, lo que permite el acceso a un proveedor JNDI no deseado. Esto podría conducir además a la divulgación o modificación de información sobre el servidor. No hay impacto en la disponibilidad.

Information

Published : 2025-11-11 01:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-42884

Mitre link : CVE-2025-42884

CVE.ORG link : CVE-2025-42884

JSON object : View

Products Affected

No product.

CWE

CWE-943

Improper Neutralization of Special Elements in Data Query Logic

{"id": "CVE-2025-42884", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-42884", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-12T17:32:55.237419Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cna@sap.com", "affectedData": [{"vendor": "SAP_SE", "product": "SAP NetWeaver Enterprise Portal", "versions": [{"status": "affected", "version": "EP-BASIS 7.50"}, {"status": "affected", "version": "EP-RUNTIME 7.50"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-11T01:15:36.893", "references": [{"url": "https://me.sap.com/notes/3660969", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-943"}]}], "descriptions": [{"lang": "en", "value": "SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.\ufffdThis could further lead to disclosure or modification of information about the server. There is no impact on availability."}, {"lang": "es", "value": "SAP NetWeaver Enterprise Portal permite a un atacante no autenticado inyectar propiedades de entorno JNDI o pasar una URL utilizada durante las operaciones de b\u00fasqueda JNDI, lo que permite el acceso a un proveedor JNDI no deseado. Esto podr\u00eda conducir adem\u00e1s a la divulgaci\u00f3n o modificaci\u00f3n de informaci\u00f3n sobre el servidor. No hay impacto en la disponibilidad."}], "lastModified": "2026-10-18T21:10:00.120", "sourceIdentifier": "cna@sap.com"}