CVE-2025-42880

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 9, 2025

Last Seen

December 10, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Code Injection Vulnerability in SAP Solution Manager Disclosed54.6

SAP has released critical security patches addressing a code injection vulnerability in SAP Solution Manager (ST 720), tracked as CVE-2025-42880. This vulnerability is rated Critical and affects users of the affected SAP solutions, necessitating immediate attention to apply the patches.

SAP Addresses Critical Vulnerabilities in December Security Update37.2

SAP has issued its December security updates, fixing 14 vulnerabilities across various products, including three critical-severity flaws. The most severe, CVE-2025-42880, has a CVSS score of 9.9 and involves a code injection issue in SAP Solution Manager ST 720, allowing authenticated attackers to e...