Skip to content
NewA calmer, faster ZeroHour
RansomwarecriticalExploited in the wild

Critical SAP S/4HANA flaw CVE-2025

Security Affairsby @securityaffairs ()2 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-42957
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC
9.92%

From the original article

2 min read at securityaffairs.com

Experts warn of an actively exploited vulnerability, tracked as CVE-2025-42957 (CVSS score: 9. 9), in SAP S/4HANA software. A critical command injection vulnerability, tracked as CVE-2025-42957 (CVSS score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.