Vulnerabilities > CVE-2025-30014

047910
CVSS 7.7 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
CWE-35

Summary

SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don?t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.

Common Weakness Enumeration (CWE)