CVE-2025-42894: fallo de gravedad media en SAP_SE SAP Business Connector
Path Traversal vulnerability in SAP Business Connector
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.8epss 0.3%
Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system commands on the server, resulting in a complete compromise of the confidentiality, integrity, and availability of the affected system.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
SAP_SE · SAP Business ConnectorCVEs relacionadas — SAP_SE SAP Business Connector
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-42892MEDIUMOS Command Injection vulnerability in SAP Business ConnectorEPSS 0.8%CVE-2024-30215MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2024-30214MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2025-42886MEDIUMReflected Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2025-42893MEDIUMOpen Redirect vulnerability in SAP Business ConnectorEPSS 0.2%CVE-2026-0514MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.2%