CVE-2025-42887 — Code Injection vulnerability in SAP Solution Manager

CVE-2025-42887

Code Injection vulnerability in SAP Solution Manager PUBLISHED

Description (CNA)

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Solution Manager	affected ST 720

CWE

CWE-94

References

https://me.sap.com/notes/3668705
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.