Security Advisory

CVE-2025-42880

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-09 02:15:09
Last updated 2026-02-26 16:57:09
Assigner sap
State PUBLISHED

Description

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.