CVE-2025-42980 — Insecure Deserialization in SAP NetWeaver Enterprise Portal Federated Portal Network

CVE-2025-42980

Insecure Deserialization in SAP NetWeaver Enterprise Portal Federated Portal Network PUBLISHED

Description (CNA)

SAP NetWeaver Enterprise Portal Federated Portal Network is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Enterprise Portal Federated Portal Network	affected EP-RUNTIME 7.50

CWE

CWE-502

References

https://me.sap.com/notes/3620498
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.