CVE-2025-42922

published 2025-09-09

CVE-2025-42922: SAP NetWeaver AS Java allows an attacker authenticated as a non-administrative user to use a flaw in an available service to upload an arbitrary file. This…

critical 9.9 CVSS 3.1

AV N AC L PR L UI N S C C H I H A H

SAP NetWeaver AS Java allows an attacker authenticated as a non-administrative user to use a flaw in an available service to upload an arbitrary file. This file when executed can lead to a full compromise of confidentiality, integrity and availability of the system.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_netweaver_as_java	—	—

CWE-94