CVE-2025-42950

Published Aug 12, 2025

Last updated 4 months ago

CVSS critical 9.9
SAP

Overview

Description
SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
Source
cna@sap.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.9
Impact score
6
Exploitability score
3.1
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

cna@sap.com
CWE-94

Social media

Hype score
Not currently trending

  1. ⚠️ Threat Actors are exploiting a Code Injection flaw in SAP S/4HANA (Private Cloud & On-Prem) 🚨 CVE-2025-42957 (CVSS 9.9) — Active Exploit 🔒 Patch now → SAP Note 3627998 📌 Also apply Note 3633838 (CVE-2025-42950, SLT/DMIS) 🛡 Harden configs & monitor f

    @IamTaradutt

    13 Sept 2025

    679 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    1 Reply

    0 Quotes

  2. CVE-2025-42950 (CVSS:9.9, CRITICAL) is Awaiting Analysis. SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function mo..https://t.co/0VvoHEB8pM #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    17 Aug 2025

    23 Impressions

    0 Retweets

    0 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  3. ⚠️Actualización de seguridad de SAP ❗CVE-2025-42957 ❗CVE-2025-42950 ❗CVE-2025-42951 ➡️Más info: https://t.co/jxqwH2t7xx https://t.co/jGRCP6KPvz

    @CERTpy

    13 Aug 2025

    101 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. CVE-2025-42950 är en kritisk sårbarhet i SAP Landscape Transformation som möjliggör injektion av godtycklig ABAP-kod, vilket kan leda till fullständig systemkompromiss. Säkerhetsåtgärder är avgörande för att skydda mot denna risk. #säkerhet #cybersäkerhet #CVE

    @Sakerhetsblogg

    12 Aug 2025

    0 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. SAP’s August 2025 Patch Tuesday fixes 15 vulnerabilities in S/4HANA and NetWeaver, including critical code injection flaws CVE-2025-42950 and CVE-2025-42957 enabling remote code execution. #SAPPatches #CodeInjection #Germany https://t.co/MoTNVXkAkX

    @TweetThreatNews

    12 Aug 2025

    27 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  6. CVE-2025-42950 SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the in… https://t.co/oOQfwIhL3z

    @CVEnew

    12 Aug 2025

    369 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  7. [CVE-2025-42950: CRITICAL] Beware of SAP Landscape Transformation vulnerability allowing injection of ABAP code by attackers, risking full system compromise and cyber security threat.#cve,CVE-2025-42950,#cybersecurity https://t.co/Dcn9feDQtg https://t.co/mlrHpmfjkj

    @CveFindCom

    12 Aug 2025

    66 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.•CVE-2026-58231
  2. SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.•CVE-2026-34265
  3. SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.•CVE-2026-44758
  4. SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token and invoke certain APIs to read and modify data. Successful exploitation results in high impact on confidentiality and integrity, with no impact on availability.•CVE-2026-44761
  5. Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.•CVE-2026-27690

References

Sources include official advisories and independent security research.