PT-2025-32607 · Sap · Sap S/4Hana

Published 2025-08-11 · Updated 2025-08-12 · CVE-2025-42946

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA (Bank Communication Management) (affected versions not specified)

Description: A directory traversal issue exists in SAP S/4HANA (Bank Communication Management). An attacker with elevated privileges and access to a specific transaction and method within Bank Communication Management could gain unauthorized access to sensitive operating system files. This access could allow the attacker to read or delete these files, impacting confidentiality and integrity. System availability is not affected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2025-16308

CVE-2025-42946

Affected Products

Sap S/4Hana

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-42946 · Security Note
• https://bdu.fstec.ru/vul/2025-16308 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2025.html · Note
• https://twitter.com/f8sbrightermind/status/1955136594458898607 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1955147751697600933 · Twitter Post
• https://me.sap.com/notes/3614804 · Note
• https://twitter.com/CVEnew/status/1955101087381233735 · Twitter Post
• https://t.me/CVEtracker/29733 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note