CVE-2025-42880

published 2025-12-09

CVE-2025-42880: Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module…

critical 9.9 CVSS 3.1

AV N AC L PR L UI N S C C H I H A H

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_solution_manager	—	—

CWE-94