Skip to content
OpenAdvisories
High · 7.8 CVE-2025-0069 EUVD-2025-1498GHSA-xj35-g37r-frw9

DLL Hijacking vulnerability in SAPSetup

Published Jan 14, 2025 · Updated Jan 14, 2025 · Assigned by sap

Description

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a company. This leads to high impact on confidentiality, integrity and availability of the Windows server.

Affected products

VendorProductAffectedFixed
SAP_SE SAPSetup LMSAPSETUP 9.0 —

Advisories 2

References