CVE-2025-42883

LOW

SAP NetWeaver Application Server - Privilege Escalation

Title source: llm
STIX 2.1

Description

Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low impact on the integrity of the application.

References (2)

Core 2
Core References

Scores

CVSS v3 2.7
EPSS 0.0004
EPSS Percentile 10.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-434
Status published
Products (15)
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 700
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 701
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 702
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 731
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 740
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 750
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 751
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 752
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 753
SAP_SE/SAP NetWeaver Application Server for ABAP (Migration Workbench) SAP_BASIS 754
... and 5 more
Published Nov 11, 2025
Tracked Since Feb 18, 2026