CVE-2025-42894: Path Traversal vulnerability in SAP Business Connector
Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system commands on the server, resulting in a complete compromise of the confidentiality, integrity, and availability of the affected system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-42894?
CVE-2025-42894 has been rated as a high severity vulnerability due to its potential for unauthorized file access and manipulation.
How do I fix CVE-2025-42894?
To fix CVE-2025-42894, ensure that your SAP Business Connector is updated to the latest version released by SAP that addresses this vulnerability.
Who is affected by CVE-2025-42894?
CVE-2025-42894 affects installations of SAP Business Connector where an attacker can authenticate as an administrator with adjacent access.
What can an attacker do by exploiting CVE-2025-42894?
An attacker exploiting CVE-2025-42894 can read, write, overwrite, and delete arbitrary files on the host system.
Is CVE-2025-42894 being actively exploited in the wild?
As of now, there is no confirmed information regarding active exploitation of CVE-2025-42894 in the wild.