Input Sanitization Flaw in SAP Solution Manager Exposes System to Code Injection

CVE-2025-42887

What is CVE-2025-42887?

The SAP Solution Manager is affected by a serious input sanitation flaw that allows authenticated attackers to insert malicious code via remote-enabled function modules. This vulnerability can potentially grant full control over the system, putting its confidentiality, integrity, and availability at significant risk. It is crucial for users to apply security updates as recommended to shield their systems from this risk.

News Articles

BleepingComputer

CVE-2025-42890CVE-2025-42887

SAP fixes hardcoded credentials flaw in SQL Anywhere Monitor

SAP has released its November security updates that address multiple security vulnerabilities, including a maximum severity flaw in the non-GUI variant of the SQL Anywhere Monitor and a critical code injection issue in the Solution Manager platform.

4 weeks ago

References