What’s Vulnerable › Vulnerabilities
CVE-2025-42992: Multiple Privilege Escalation Vulnerabilities in SAPCAR
- Severity: medium (CVSS 6.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-08 · updated 2026-06-17
- Weakness: CWE-266
Description
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on integrity, but low impact on confidentiality and availability of the system.
Affected products
- SAP_SE SAPCAR: SAP_CAR 7.53, 7.22EXT
References
Get alerted when CVE-2025-42992 or the next vulnerability affects your stack