CVE-2025-42887criticalCWE-94

CVE-2025-42887: falha crítica em SAP_SE SAP Solution Manager

Code Injection vulnerability in SAP Solution Manager

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP Solution Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 0.6%
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
SAP_SE · SAP Solution Manager
CVEs relacionadas — SAP_SE SAP Solution Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2025-42880CRITICALCode Injection vulnerability in SAP Solution ManagerEPSS 4.5%CVE-2023-49587MEDIUMCommand Injection vulnerability in SAP Solution ManagerEPSS 0.4%CVE-2025-30017MEDIUMMissing Authorization check in SAP Solution ManagerEPSS 0.1%