3643733 - Vulnerabilities CVE-2025-50059, CVE-2025-50063, CVE-2025-50106, CVE-2025-30749 impact in AS Java based SAP system

Symptom

Multiple Java vulnerabilities have been disclosed, including CVE-2025-50059, CVE-2025-50063, CVE-2025-50106, and CVE-2025-30749.
The vulnerabilities are related to Oracle Java SE and GraalVM. Concerns were raised regarding whether SAP system based on AS Java (such as SAP Solution Manager, PO) is affected by these vulnerabilities.

Environment

SAP NetWeaver Application Server Java - AS Java

Product

SAP NetWeaver Application Server for Java all versions

Keywords

java vulnerabilities, CVE-2025-50059, CVE-2025-50063, CVE-2025-50106, CVE-2025-30749, SAP JVM, SAP Solution Manager, improper access control, local privilege escalation, remote code execution, GraalVM, Java SE, 8u451, patch update, security vulnerabilities, SAP JVM, J2ee engine, po, pi, xi, as java, j2ee, j2ee engine, java, solman, ep, enterprise portal, portal, , KBA , BC-JVM , SAP Java Virtual Machine , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.