CVE-2025-42894
Path Traversal vulnerability in SAP Business Connector
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 nov 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system commands on the server, resulting in a complete compromise of the confidentiality, integrity, and availability of the affected system.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
SAP_SE · SAP Business Connector¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →