SAP SE today addressed two newly disclosed vulnerabilities in its SAP Graphical User Interface client applications following their discovery in coordinated research by Pathlock Inc. and Fortinet Inc.
CVE-2025-42887 in SAP Solution Manager allows unauthenticated code injection and full system takeover Vulnerability scored 9.9/10; patch released in SAP’s November 2025 update SAP also fixed ...
S/4HANA is SAP’s latest iteration of its flagship enterprise resource planning (ERP) system. The successor to SAP ECC, S/4HANA is built on an in-memory database and is designed to enable real-time ...