CVE-2025-42910

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management (affected versions not specified)

Description SAP Supplier Relationship Management does not properly verify the type or content of uploaded files. This allows an authenticated attacker to upload arbitrary files, including potentially malicious executables. If these files are downloaded and executed by users, they could host malware, leading to severe security breaches impacting confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.