CVE-2025-42903

User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management

A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Financial Service Claims Management

CVE-2025-42891

Missing Authorization check in SAP Enterprise Search for ABAP

Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report. This could lead to a high impact on data confidentiality and a low impact on data integrity. There is no impact on application's availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Enterprise Search For Abap

CVE-2025-42950

Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Landscape Transformation

CVE-2025-42888

Information Disclosure vulnerability in SAP GUI for Windows

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft Sap

Products

Windows Gui Gui For Windows and 1 more

CVE-2025-42890

Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui)

SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Sql Anywhere

CVE-2025-42889

SQL Injection vulnerability in SAP Starter Solution (PL SAFT)

SAP Starter Solution allows an authenticated attacker to execute crafted database queries, thereby exposing the back-end database. As a result, this vulnerability has a low impact on the application's confidentiality and integrity but no impact on its availability.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Starter Solution

CVE-2025-42901

Code Injection vulnerability in SAP Application Server for ABAP (BAPI Browser)

SAP Application Server for ABAP allows an authenticated attacker to store malicious JavaScript payloads which could be executed in victim user's browser when accessing the affected functionality of BAPI explorer. This has low impact on confidentiality and integrity with no impact on availability of the application.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Application Server Netweaver Application Server For Abap Sap Web Application Server

CVE-2025-42895

Code Injection vulnerability in SAP HANA JDBC Client

Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability of the application.

CVSS 3.1 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Hana-client

CVE-2025-42942

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP

SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability. Due to this, an unauthenticated attacker could craft a URL embedded with malicious script and trick an unauthenticated victim to click on it to execute the script. Upon successful exploitation, the attacker could access and modify limited information within the scope of victim's browser. This vulnerability has no impact on availability of the application.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Netweaver Application Server For Abap

CVE-2025-42896

Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform

SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrity, and no impact to availability.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Businessobjects Business Intelligence Platform

CVE-2025-42897

Information Disclosure vulnerability in SAP Business One (SLD)

Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and availability.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Business One

CVE-2025-42958

Missing Authentication check in SAP NetWeaver

Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Netweaver Sap Netweaver

CVE-2025-42899

Missing Authorization check in SAP S4CORE (Manage Journal Entries)

SAP S4CORE (Manage journal entries) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges. This has low impact on confidentiality of the application with no impact on integrity and availability of the application.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

S4core

CVE-2025-42906

Directory Traversal vulnerability in SAP Commerce Cloud

SAP Commerce Cloud contains a path traversal vulnerability that may allow users to access web applications such as the Administration Console from addresses where the Administration Console is not explicitly deployed. This could potentially bypass configured access restrictions, resulting in a low impact on confidentiality, with no impact on the integrity or availability of the application.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Commerce Cloud

CVE-2025-42902

Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform

Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it has a low impact on the availability but no impact on the confidentiality and integrity.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Abap Platform As Abap Netweaver and 2 more

CVE-2025-42910

Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker could cause high impact on confidentiality, integrity and availability of the application.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Supplier Relationship Management

CVE-2025-42961

Missing Authorization check in SAP NetWeaver Application Server for ABAP

Due to a missing authorization check in SAP NetWeaver Application server for ABAP, an authenticated user with high privileges could exploit the insufficient validation of user permissions to access sensitive database tables. By leveraging overly permissive access configurations, unauthorized reading of critical data is possible, resulting in a significant impact on the confidentiality of the information stored. However, the integrity and availability of the system remain unaffected.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Netweaver Application Server For Abap

CVE-2025-42943

Information Disclosure in SAP GUI for Windows

SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker needs developer authorization in a specific Application Server ABAP to make changes in the code, and the victim needs to execute by using SAP GUI for Windows. This could trigger automatic NTLM authentication, potentially exposing hashed credentials to an attacker. As a result, it has a high impact on the confidentiality.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Sap Gui

CVE-2025-42909

Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances

SAP Cloud Appliance Library Appliances allows an attacker with high privileges to leverage an insecure S/4HANA default profile setting in an existing SAP CAL appliances to gain access to other appliances. This has low impact on confidentiality of the application, integrity and availability is not impacted.

CVSS 3.1 · 3 Low EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Cloud Appliance Library Appliances

CVE-2025-42913

Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)

Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality and availability are not impacted.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Vendors

Sap

Products

Fiori