https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T23:50:33.437141+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-0057 CVE-2025-0057 — Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application) 2026-09-29T23:50:33.452406+00:00

Affected: SAP_SE SAP NetWeaver AS JAVA (User Admin Application)

SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the attacker can read and modify information within the scope of victim's web browser.