Unrated severityNVD Advisory· Published Nov 11, 2025· Updated Feb 26, 2026
Path Traversal vulnerability in SAP Business Connector
CVE-2025-42894
Description
Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system commands on the server, resulting in a complete compromise of the confidentiality, integrity, and availability of the affected system.
Affected products
2- SAP_SE/SAP Business Connectorv5Range: SAP BC 4.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.