A critical vulnerability identified as CVE-2025-12345 has been discovered in SAP S/4HANA, a leading enterprise resource planning software. This flaw allows remote attackers to execute arbitrary code, potentially compromising sensitive business data and disrupting operations. SAP has issued an urgent security advisory urging all users to apply the latest patches immediately to mitigate the risk. The vulnerability stems from improper input validation in the system's core components, making it exploitable over the network without authentication. Cybersecurity experts warn that threat actors could leverage this weakness to gain unauthorized access, deploy malware, or conduct espionage. Organizations relying on SAP S/4HANA are advised to conduct thorough security assessments and implement recommended safeguards. This incident highlights the critical need for continuous monitoring and timely patch management in enterprise environments to defend against evolving cyber threats. The SAP security team continues to investigate and collaborate with global partners to enhance protection measures and prevent exploitation of this vulnerability.
This Cyber News was published on thehackernews.com. Publication date: Sun, 07 Sep 2025 22:29:04 +0000