Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SAP_SE | SAP NetWeaver Application Server for ABAP (Migration Workbench) | unaffected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions |
|---|---|---|---|
| Sap | Application Server | — | — |
| Sap | Netweaver | — | — |
| Sap | Netweaver Abap | — | — |
| Sap | Netweaver Abap Application Server | — | — |
| Sap | Netweaver Application Server | — | — |
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No remediation available yet.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 12 Nov 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 12 Nov 2025 13:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Sap
Sap application Server Sap netweaver Sap netweaver Abap Sap netweaver Abap Application Server Sap netweaver Application Server |
|
| Vendors & Products |
Sap
Sap application Server Sap netweaver Sap netweaver Abap Sap netweaver Abap Application Server Sap netweaver Application Server |
Tue, 11 Nov 2025 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low impact on the integrity of the application. | |
| Title | Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) | |
| Weaknesses | CWE-434 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: sap
Published:
Updated: 2025-11-12T20:11:48.613Z
Reserved: 2025-04-16T13:25:19.826Z
Link: CVE-2025-42883
Vulnrichment
Updated: 2025-11-12T17:33:06.298Z
NVD
Status : Deferred
Published: 2025-11-11T01:15:36.737
Modified: 2026-04-15T00:35:42.020
Link: CVE-2025-42883
Redhat
No data.
OpenCVE Enrichment
Updated: 2025-11-12T12:47:43Z