SAP S/4HANA (Private Cloud or On-Premise) vulnerabilities

2 known vulnerabilities in SAP S/4HANA (Private Cloud or On-Premise) from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  SAP S/4HANA (Private Cloud or On-Premise): Improper Validation of Specified Type of Input

  CVE-2025-42916Sep 9, 2025SAP

  Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability

• 9.9 Critical severity

  SAP S/4HANA (Private Cloud or On-Premise): Improper Control of Generation of Code

  CVE-2025-42957Aug 12, 2025SAPEPSS 1.67%

  SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectiv