PoC Index

CVE-2025-0054

MEDIUM 5.4EPSS 0.3%

SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be later executed in the victim's web browser. With this the attacker might be able to read or modify information associated with the vulnerable web page.

CVSS v3.1
5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.27% chance of exploitation in the next 30 days, 19th percentile
Published
2025-02-11
Updated
2025-02-18

Proof-of-concept exploits (1)

References

Related