Vulnerability · Published Apr 8, 2025 · Assigned by sap
CVE-2025-30014Directory Traversal vulnerability in SAP Capital Yield Tax Management
High 7.7
In plain English
A high-severity security flaw in SAP Capital Yield Tax Management from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.8%top 43.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | SAP Capital Yield Tax Management | CYTERP 420_700CYT 800IBS 7.0CYT4HANA 100 |
Weakness: CWE-35 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N