Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4hana_(private_cloud_or_on-premise):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4Hana (Private Cloud Or On Premise) (656cb25f-3341-537e-b240-6cb8398fc08e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42957 vulnerable 2026-06-08 07:25:08.458312 Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)
CRITICAL (9.9)
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
Published: 2025-08-12T02:09:53.111Z
Updated: 2026-02-26T17:49:43.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-42916 vulnerable 2026-06-08 07:25:08.413147 Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)
HIGH (8.1)
Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.
Published: 2025-09-09T02:07:53.085Z
Updated: 2025-09-09T13:47:28.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.