SAP NetWeaver AS Java (User Admin Application)

7.50

MAJOR_MINOR 1 CVE

UMEADMIN 7.50

OTHER 1 CVE

ENGINEAPI 7.50

OTHER 1 CVE

SERVERCORE 7.50

RC 1 CVE

CVE-2025-0057

SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the attacker can read and modify information within the scope of victim's web browser.

MEDIUM Jan 14, 2025

CVE-2024-22126

The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.

MEDIUM Feb 13, 2024