Description
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Capital Yield Tax Management | CYTERP 420_700, CYT 800, IBS 7.0, CYT4HANA 100 | — |
Advisories 2
- NCSC-2025-0119 Kwetsbaarheden verholpen in SAP-producten NCSC-NL (Netherlands) · Apr 30, 2025
- WID-SEC-2025-0719 SAP Patchday April 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 24, 2025