Lucene search
K

128 matches found

Cvelist
Cvelist
added 2025/12/09 2:15 a.m.22 views

CVE-2025-42880 Code Injection vulnerability in SAP Solution Manager

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS0.00126EPSS
Exploits0References2
CVE
CVE
added 2025/12/09 2:15 a.m.11 views

CVE-2025-42880

CVE-2025-42880 concerns SAP Solution Manager. Underlying issue is missing input sanitation that allows an authenticated attacker to insert arbitrary code when calling a remote-enabled function module, potentially giving full control of the system and high impact to confidentiality, integrity, and...

9.9CVSS6.4AI score0.00126EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 2:15 a.m.3 views

CVE-2025-42880 Code Injection vulnerability in SAP Solution Manager

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS6.4AI score0.00126EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49769

Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description SAP Solution Manager is susceptible to a code injection issue stemming from inadequate input sanitation. An authenticated attacker can inject malicious code when invoking a...

9.9CVSS8AI score0.00126EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2025/11/14 12:0 a.m.3 views

SAP NetWeaver AS ABAP Missing Authorization Check (3643337)

Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAP to retrieve restricted technical information from the system. This disclosure of environment details of the system...

4.3CVSS5.6AI score0.00034EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/11/12 12:36 a.m.6 views

CVE-2025-42882

Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAP to retrieve restricted technical information from the system. This disclosure of environment details of the system...

4.3CVSS6.2AI score0.00034EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/12 12:36 a.m.2 views

CVE-2025-42887

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS6.6AI score0.00084EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/11 3:30 a.m.1 views

EUVD-2025-60991

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS6.3AI score0.00084EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/11 3:30 a.m.2 views

EUVD-2025-60996

Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAP to retrieve restricted technical information from the system. This disclosure of environment details of the system...

4.3CVSS5.8AI score0.00034EPSS
Exploits0References3
NVD
NVD
added 2025/11/11 1:15 a.m.4 views

CVE-2025-42887

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS0.00084EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/11 12:14 a.m.4 views

CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS0.00084EPSS
Exploits0References2
CVE
CVE
added 2025/11/11 12:14 a.m.8 views

CVE-2025-42887

CVE-2025-42887 affects SAP Solution Manager. The vulnerability is a code-injection flaw caused by missing input sanitization when an authenticated user calls a remote-enabled function module, potentially allowing full system compromise with high impact to confidentiality, integrity, and availabil...

9.9CVSS6.4AI score0.00084EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/11 12:14 a.m.1 views

CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS6.2AI score0.00084EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.4 views

PT-2025-46228

Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description SAP Solution Manager is susceptible to a code injection issue stemming from inadequate input sanitization. An authenticated attacker can inject malicious code by calling a...

9.9CVSS6.7AI score0.00084EPSS
Exploits0References21
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-19368

Malware in sbrugna...

7.6CVSS7.7AI score0.00495EPSS
Exploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-1052

Malware in sbrugna...

8.8CVSS8.8AI score0.00335EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-24203

Malicious code in bioql PyPI...

9.9CVSS6.8AI score0.00163EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-27214

Malicious code in bioql PyPI...

5CVSS6.4AI score0.00051EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-8747

Malicious code in bioql PyPI...

6.5CVSS6.8AI score0.00475EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-20336

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.0016EPSS
Exploits0References2
Rows per page
Query Builder