CVE-2025-25243 — Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)
SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over t…
Published: 2025-02-11 · CVSS: 8.6 · CVSS 3.1
SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7