CVE-2025-30014CWE-35

Directory Traversal vulnerability in SAP Capital Yield Tax Management

High · published April 8, 2025

CVSS v3.1
7.7
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00790 · 55.8th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2025-04-08T07:14Z
EPSS history
Timeline
  • 08 APR 07:14Z
    Directory Traversal vulnerability in SAP Capital Yield Tax Management
    cvelistv5