CVE-2025-42880

Publication date

2025-12-09 02:15:09

Family

sap

State

PUBLISHED

Description

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.