As hackers exploit one high-severity SAP flaw, company warns of 3 more

SAP warns that users of its S/4HANA and NetWeaver products should patch promptly as high-severity flaws emerge across multiple programmes. The highest-severity issue, rated 10, is in NetWeaver and CVE-2025-42944 allows unauthenticated attackers to execute commands by sending malicious payloads to an open port, a deserialization-based vulnerability described as a backdoor by SAP. In the same disclosure, SAP identified three other high-severity NetWeaver vulnerabilities with ratings of 9.9, 9.6 and 9.1.

Separate findings from SecurityBridge reported CVE-2025-42957, a 9.9-rated code-injection flaw in SAP S/4HANA that could enable a complete system compromise with minimal effort, requiring only a valid user account with permissions to call the vulnerable RFC module and the S_DMIS authorisation. SAP warned that this flaw could jeopardise confidentiality, integrity and availability, and that without immediate mitigation your S/4HANA system could be severely compromised.

Other affected products include SAP Business One, SAP Landscape Transformation Replication Server, SAP Commerce Cloud, SAP Datahub, SAP Business Planning and Consolidation, SAP HCM, SAP BusinessObjects BI Platform, SAP SRM, and Fiori, with severity ratings from 3.1 to 8.8; all should be patched as soon as possible.