Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_as_java_(deploy_web_service):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver As Java (Deploy Web Service) (b62c8988-d27c-5b77-ba3d-325b2aa673e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42922 vulnerable 2026-06-08 07:25:08.424782 Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)
CRITICAL (9.9)
SAP NetWeaver AS Java allows an attacker authenticated as a non-administrative user to use a flaw in an available service to upload an arbitrary file. This file when executed can lead to a full compromise of confidentiality, integrity and availability of the system.
Published: 2025-09-09T02:09:38.727Z
Updated: 2026-02-26T17:49:06.643Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.