BC
Product
Business Connector
7
CVEs
0
On KEV
6.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Business Connector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-42894 | 6.8 | Nov 11 | Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete… Affected: 4.8 |
| CVE-2025-42892 | 6.8 | Nov 11 | Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially… Affected: 4.8 |
| CVE-2026-0514 | 6.1 | Jan 13 | Cross-Site Scripting (XSS) vulnerability in SAP Business Connector Affected: 4.8 |
| CVE-2025-42893 | 6.1 | Nov 11 | Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an… Affected: 4.8 |
| CVE-2025-42886 | 6.1 | Nov 11 | Due to a Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible Affected: 4.8 |
| CVE-2006-0731 | – | Feb 16 | WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter,… Affected: through core_fix_7 |
| CVE-2006-0732 | – | Feb 16 | Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to (1)… Affected: 4.6; 4.7 |
Showing 7