← CVE Intelligence

CVE-2025-42889

SQL Injection vulnerability in SAP Starter Solution (PL SAFT) PUBLISHED

Description (CNA)

SAP Starter Solution allows an authenticated attacker to execute crafted database queries, thereby exposing the back-end database. As a result, this vulnerability has a low impact on the application's confidentiality and integrity but no impact on its availability.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Starter Solution (PL SAFT)affected SAP_APPL 600; affected 602; affected 603; affected 604; affected 605; affected 606; affected 616; affected SAP_FIN 617; affected 618; affected 700; affected 720; affected 730; affected S4CORE 100; affected 101; affected 102; affected 103; affected 104

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.