SAP Starter Solution Authenticated DB Query Exec Vulnerability
CVE-2025-42889 Published on November 11, 2025

SQL Injection vulnerability in SAP Starter Solution (PL SAFT)
SAP Starter Solution allows an authenticated attacker to execute crafted database queries, thereby exposing the back-end database. As a result, this vulnerability has a low impact on the application's confidentiality and integrity but no impact on its availability.

NVD

Vulnerability Analysis

CVE-2025-42889 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

LOW

Integrity Impact:

LOW

Availability Impact:

NONE

Weakness Type

What is a SQL Injection Vulnerability?

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CVE-2025-42889 has been classified to as a SQL Injection vulnerability or weakness.

Products Associated with CVE-2025-42889

Want to know whenever a new CVE is published for Sap Starter Solution? stack.watch will email you.

Sap Starter Solution

Affected Versions

SAP_SE SAP Starter Solution (PL SAFT):

Version SAP_APPL 600 is affected.
Version 602 is affected.
Version 603 is affected.
Version 604 is affected.
Version 605 is affected.
Version 606 is affected.
Version 616 is affected.
Version SAP_FIN 617 is affected.
Version 618 is affected.
Version 700 is affected.
Version 720 is affected.
Version 730 is affected.
Version S4CORE 100 is affected.
Version 101 is affected.
Version 102 is affected.
Version 103 is affected.
Version 104 is affected.

Exploit Probability

EPSS

0.03%

Percentile

9.51%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.