What’s Vulnerable › Vulnerabilities
CVE-2025-0069: DLL Hijacking vulnerability in SAPSetup
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-01-14 · updated 2026-06-17
- Weakness: CWE-427
Description
Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a company. This leads to high impact on confidentiality, integrity and availability of the Windows server.
Affected products
- SapSetup (Software Installation Program): LMSAPSETUP 9.0
References
Get alerted when CVE-2025-0069 or the next vulnerability affects your stack