PT-2025-41839 · Sap · Sap Commerce Cloud

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-42906

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud (affected versions not specified)

Description SAP Commerce Cloud contains a path traversal issue that could allow users to access web applications, such as the Administration Console, from locations where it is not explicitly deployed. This may bypass configured access restrictions. The impact on confidentiality is considered low, with no impact on integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-42906

Affected Products

Sap Commerce Cloud

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-42906 · Security Note
• https://t.me/CVEtracker/34820 · Telegram Post
• https://me.sap.com/notes/3634724 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1977903153644257332 · Twitter Post
• https://t.me/cveNotify/138482 · Telegram Post