CVE-2025-42884 - JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal

CVE ID : CVE-2025-42884 Published : Nov. 11, 2025, 1:15 a.m. | 16 minutes ago Description : SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There is no impact on availability. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...