CVE-2025-42884

6.5MEDIUM

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provide

Опубликовано: 11/11/2025Обновлено: 11/12/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There is no impact on availability.

ИИ-АнализНа базе ИИ

Ссылки