CVE-2025-30014 — Directory Traversal vulnerability in SAP Capital Yield Tax Management

CVE-2025-30014

Directory Traversal vulnerability in SAP Capital Yield Tax Management PUBLISHED

Description (CNA)

SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Capital Yield Tax Management	affected CYTERP 420_700; affected CYT 800; affected IBS 7.0; affected CYT4HANA 100

CWE

CWE-35

References

https://me.sap.com/notes/2927164
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.