Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-42946

Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacker to potentially read or delete these files hence causing a high impact on confidentiality and low impact on integrity. There is no impact on availability of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Bank Communication Management)

Default version status: unaffected

  • SAP_APPL 606affected
  • SAP_FIN 617affected
  • 618affected
  • 720affected
  • 730affected
  • S4CORE 102affected
  • 103affected
  • 104affected
  • 105affected
  • 106affected
  • 107affected
  • 108affected

References