CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.9. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-42880
Severity
CRITICAL
CVSS
9.9
EPSS
4.05%
Original NVD Description
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.