Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-42889 EUVD-2025-60989GHSA-wvj2-mccw-pg3m

SQL Injection vulnerability in SAP Starter Solution (PL SAFT)

Published Nov 11, 2025 · Updated Nov 12, 2025 · Assigned by sap

Description

SAP Starter Solution allows an authenticated attacker to execute crafted database queries, thereby exposing the back-end database. As a result, this vulnerability has a low impact on the application's confidentiality and integrity but no impact on its availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Starter Solution (PL SAFT) SAP_APPL 600, 602, 603, 604, 605, 606, 616, SAP_FIN 617, 618, 700, 720, 730, S4CORE 100, 101, 102, 103, 104 —

Advisories 2

References