Critical SAP vulnerability: Code injection threat

Sourcesecurity • November 12, 2025

Share: View original

The discovery is part of 25 new and updated vulnerabilities highlighted in SAP's November Patch Day notes. Details of the vulnerability . The key ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SAP Addresses Critical Code Injection Vulnerabilities in November Security Update SAP has released a security update addressing 18 new vulnerabilities, including critical flaws related to code execution and data injection. Four of these vulnerabilities have a CVSS score of 10.0, indicating they require immediate attention from organizations using SAP infrastructure. This update is part of SAP's November Patch Day notes. 1 sources 39

Extracted Entities

Attack Types (1)

Companies (1)