CVE-2025-42887 — Code Injection vulnerability in SAP Solution Manager
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide…
Published: 2025-11-11 · CVSS: 9.9 · CVSS 3.1
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7