CVE-2025-42880: CVE-2025-42880: kod enjeksiyonu

Açıklama (NVD)

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.

Özet bilgiler

CVSS v3.1

9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

%4,50 (yüzdelik 92)

CWE

CWE-94

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• me.sap.com
• url.sap
• CWE-94