CVE-2025-42967
published 2025-07-08CVE-2025-42967: SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with user level privileges to create a new…
PriorityP266critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.86%
53.9th percentile
SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with user level privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
| sap_se | sap_s_4hana_and_sap_scm | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-07-08
Published