Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2025-42910

CVSS 3.1
9.0 critical
EPSS
<1%p38
Published
·
Modified
Analyze CVE-2025-42910 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker could cause high impact on confidentiality, integrity and availability of the application.

Weakness
CWE-434
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

2 stories