← Back to browse · API

CVE-2025-42967

Severity
CRITICAL
CVSS
9.9
EPSS
0.00878
Risk score
39.91
CISA KEV
No
PoC
No
Published
2025-07-08
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-20342, GHSA-2XW5-JHRF-JWG8
Products
SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 103, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 104, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 106, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 107, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 108, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 701, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 702, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 712, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) 714, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) S4CORE 102, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) S4COREOP 105, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) SCM 700, SAP_SE:SAP S/4HANA and SAP SCM (Characteristic Propagation) SCMAPO 713
Sources
euvd EUVD-2025-20342

Description

SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with user level privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.

References