CVE-2025-43001: medium-severity vulnerability in SAP_SE SAPCAR
Multiple Privilege Escalation Vulnerabilities in SAPCAR
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.2%
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with signed archives without breaking the signature, but it has a low impact on the confidentiality and availability of the system.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
Affected products
SAP_SE · SAPCARRelated CVEs — SAP_SE SAPCAR
In the same product, most dangerous first.