CVE-2025-30014
Directory Traversal vulnerability in SAP Capital Yield Tax Management
- State
- Published
- Severity
- 7.7 High
- Published
- Apr 8, 2025
- Updated
- Apr 8, 2025
- Reserved
- Mar 13, 2025
Description
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.7 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N | sap |
Weaknesses
- CWE-35 Path Traversal
Affected Products
| Product | Versions |
|---|---|
SAP Capital Yield Tax ManagementSAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.