Three Critical Priority SAP Security Patches for November

Erp.Today • November 13, 2025

Share: View original

JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal;; Open Redirect vulnerabilities in SAP S/4HANA landscape;; Missing authentication in ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Code Injection Vulnerability in SAP Solution Manager Disclosed SAP has released critical security patches addressing a code injection vulnerability in SAP Solution Manager (ST 720), tracked as CVE-2025-42880. This vulnerability is rated Critical and affects users of the affected SAP solutions, necessitating immediate attention to apply the patches. 7 sources 55

Extracted Entities

Platforms (2)

SAP NetWeaver Enterprise Portal SAP S/4HANA

Vulnerabilities (3)

JNDI Injection Missing Authentication Open Redirect