CVE-2025-42894: falha de média gravidade em SAP_SE SAP Business Connector
Path Traversal vulnerability in SAP Business Connector
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.3%
Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system commands on the server, resulting in a complete compromise of the confidentiality, integrity, and availability of the affected system.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
SAP_SE · SAP Business ConnectorCVEs relacionadas — SAP_SE SAP Business Connector
No mesmo produto, das mais perigosas para as menos.
CVE-2025-42892MEDIUMOS Command Injection vulnerability in SAP Business ConnectorEPSS 0.8%CVE-2024-30215MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2024-30214MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2025-42886MEDIUMReflected Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2025-42893MEDIUMOpen Redirect vulnerability in SAP Business ConnectorEPSS 0.2%CVE-2026-0514MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.2%