Vulnerabilities in SAP Products · CIAD-2025-0042
CERT-In advisory CIAD-2025-0042 · 12 Nov 2025
Official title
CIAD-2025-0042 : Multiple vulnerabilities in SAP Products
Official record
Open source pageSummary
Check the official recordWhat changed
Multiple vulnerabilities exist in various SAP products that allow attackers to disclose sensitive information, gain elevated privileges, or execute arbitrary code. Attackers may also cause denial-of-service conditions, perform cross-site scripting, perform cache poisoning, or upload malicious files. Affected parties include SAP system administrators, security teams, IT infrastructure teams, and application developers. Users must apply the security updates provided by the vendor to mitigate these risks. The vulnerabilities affect a wide range of SAP software including SAP NetWeaver, SAP HANA, and SAP S/4HANA components.
What you must do
- Apply appropriate updates as mentioned by the vendor.
Key dates
- Original Issue Date
- 12 Nov 2025
Who is affected
Document text
CERT-In Advisory CIAD-2025-0042 Multiple vulnerabilities in SAP Products Original Issue Date: November 12, 2025 Severity Rating: High
Software Affected SQL Anywhere Monitor (Non-Gui) SAP NetWeaver AS Java SAP Solution Manager SAP CommonCryptoLib SAP HANA JDBC Client SAP Business Connector SAP NetWeaver Enterprise Portal SAP S/4HANA landscape (SAP E-Recruiting BSP) SAP HANA 2.0 (hdbrss) SAP GUI for Windows SAP Starter Solution (PL SAFT) SAP NetWeaver Application Server Java SAP Business One (SLD) SAP S4CORE (Manage Journal Entries) SAP NetWeaver Application Server for ABAP SAP Fiori for SAP ERP SAP NetWeaver Application Server for ABAP (Migration Workbench)
Overview Multiple vulnerabilities have been reported, which could be exploited by an attacker to disclose sensitive information, gain elevated privileges, execute arbitrary code, cause malicious URL redirection, denial-of-service condition, perform Cross-Site Scripting (XSS), perform cache poisoning and upload malicious files on the targeted system.
Target Audience: SAP system administrators, SAP security teams, IT infrastructure teams managing SAP landscape and Application developers using affected SAP.
Risk Assessment: Potential for system compromise, data exposure, unauthorized access, privilege abuse, service disruption, arbitrary file upload.
Impact Assessment: High risk of data breach, execution of arbitrary code, full system compromise, unavailability, security control bypass, and operational disruption.
Description Multiple vulnerabilities have been reported in SAP products; details of which are provided below:
Solution Apply appropriate updates as mentioned by the vendor: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/november-2025.html
Vendor Information SAP https://support.sap.com/en/my-support/knowledge-base/security-notes-news/november-2025.html
References SAP https://support.sap.com/en/my-support/knowledge-base/security-notes-news/november-2025.html
CVE Name CVE-2025-42890 CVE-2025-42944 CVE-2025-42887 CVE-2025-42940 CVE-2025-42895 CVE-2025-42892 CVE-2025-42894 CVE-2025-42884 CVE-2025-42924 CVE-2025-42893 CVE-2025-42886 CVE-2025-42885 CVE-2025-42888 CVE-2025-42889 CVE-2025-42919 CVE-2025-42897 CVE-2025-42899 CVE-2025-42882 CVE-2025-23191 CVE-2025-42883
Source details
- Source
- Indian Computer Emergency Response Team
- Type
- advisory
- Published by source
- 12 Nov 2025
- Document number
- CIAD-2025-0042
- Issuing division
- CERT-In
- Coverage area
- cybersecurity