cbcvebase.
CVE-2025-42883
published 2025-11-11

CVE-2025-42883: Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges…

low2.7CVSS 3.1
AVNACLPRHUINSUCNILAN
Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low impact on the integrity of the application.

Affected

15 ranges
VendorProductVersion rangeFixed in
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap