CVE-2025-30014
Published: Apr 8, 2025
Modified: Apr 8, 2025
CVSS v3.1
7.7
Description
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.
| Vendor | Product | Versions |
|---|---|---|
SAP_SE | SAP Capital Yield Tax Management | affected CYTERP 420_700affected CYT 800affected IBS 7.0affected CYT4HANA 100 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now