SAP Patches Critical Vulnerabilities With December 2025 Security Updates

Back Feeds.Feedburner

SAP Patches Critical Vulnerabilities With December 2025 Security Updates

Feeds.Feedburner •Ionut Arghire • December 10, 2025

Share: View original

Affecting Solution Manager, Commerce Cloud, and jConnect SDK, the bugs could lead to code injection and remote code execution.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Code Injection Vulnerability in SAP Solution Manager Disclosed SAP has released critical security patches addressing a code injection vulnerability in SAP Solution Manager (ST 720), tracked as CVE-2025-42880. This vulnerability is rated Critical and affects users of the affected SAP solutions, necessitating immediate attention to apply the patches. 7 sources 55

Extracted Entities

Attack Types (2)

Code Injection Remote Code Execution

Platforms (3)

Commerce Cloud JConnect SDK Solution Manager