CVE-2025-42957

🗓️ 12 Aug 2025 02:09:53Reported by sapType

cve🔗 web.nvd.nist.gov📰️ 18 Media mentions👁 76 Views

CVE-2025-42957: SAP S/4HANA RFC function module enables ABAP injection, auth bypass, backdoor risk.

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the functional module of the SAP S/4HANA software platform’s RFC interface allows a perpetrator to execute arbitrary code.	1 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-42957	12 Aug 202502:43	–	circl
CNNVD	SAP S/4HANA 代码注入漏洞	12 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-42957 Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)	12 Aug 202502:09	–	cvelist
EUVD	EUVD-2025-24203	3 Oct 202520:07	–	euvd
HackRead	Critical SAP Vulnerability CVE-2025-42957 Actively Exploited by Hackers	6 Sep 202514:10	–	hackread
NCSC	Vulnerabilities fixed in SAP products	5 Sep 202511:12	–	ncsc
NVD	CVE-2025-42957	12 Aug 202503:15	–	nvd
Positive Technologies	PT-2025-32613	12 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-42957	14 Aug 202502:24	–	redhatcve

Vulners

Node

sap s4coreMatch102

sap s/4hanaMatch103

sap s/4hanaMatch104

sap s/4hanaMatch105

sap s/4hanaMatch106

sap s/4hanaMatch107

sap s/4hanaMatch108

[
  {
    "defaultStatus": "unaffected",
    "product": "SAP S/4HANA (Private Cloud or On-Premise)",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "S4CORE 102"
      },
      {
        "status": "affected",
        "version": "103"
      },
      {
        "status": "affected",
        "version": "104"
      },
      {
        "status": "affected",
        "version": "105"
      },
      {
        "status": "affected",
        "version": "106"
      },
      {
        "status": "affected",
        "version": "107"
      },
      {
        "status": "affected",
        "version": "108"
      }
    ]
  }
]

Source	Link
me	www.me.sap.com/notes/3627998
url	www.url.sap/sapsecuritypatchday

17 Jun 2026 09:23Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.9

EPSS0.01553

SSVC