CVE-2025-31325 Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation)
An unauthenticated attacker can inject malicious JavaScript into SAP NetWeaver documentation pages, allowing limited access to restricted information in victim browsers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-31325?
CVE-2025-31325 is a medium-severity cross-site scripting vulnerability in SAP_SE SAP NetWeaver (ABAP Keyword Documentation), published on 10 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The vulnerability does not affect data integrity or availability and operates entirely within the context of the client's browser.
Weakness: CWE-79
Which versions are affected by CVE-2025-31325?
How do I fix CVE-2025-31325?
No fix has been published for CVE-2025-31325 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2025-31325 being exploited?
There is no known exploitation of CVE-2025-31325 in the wild and no public exploit code.
Sources
Also known as GHSA-mf43-m2mh-xcq6.