CVE-2025-42964 — Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

CVE-2025-42964

Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration PUBLISHED

Description (CNA)

SAP NetWeaver Enterprise Portal Administration is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Enterprise Portal Administration	affected EP-RUNTIME 7.50

CWE

CWE-502

References

https://me.sap.com/notes/3621236
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.