CVE-2025-42892

Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system�s confidentiality, integrity, and availability.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3665900	Permissions Required
https://url.sap/sapsecuritypatchday	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:business_connector:4.8:*:*:*:*:*:*:*

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Debido a una vulnerabilidad de inyección de comandos del sistema operativo en SAP Business Connector, un atacante autenticado con acceso administrativo y acceso a la red adyacente podría cargar contenido especialmente diseñado al servidor. Si es procesado por la aplicación, este contenido permite la ejecución de comandos arbitrarios del sistema operativo. La explotación exitosa podría llevar al compromiso total de la confidencialidad, integridad y disponibilidad del sistema.

Information

Published : 2025-11-11 01:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-42892

Mitre link : CVE-2025-42892

CVE.ORG link : CVE-2025-42892

JSON object : View

Products Affected

sap

business_connector

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-42892", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-42892", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-12T17:31:57.023137Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}]}, "affected": [{"source": "cna@sap.com", "affectedData": [{"vendor": "SAP_SE", "product": "SAP Business Connector", "versions": [{"status": "affected", "version": "SAP BC 4.8"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-11T01:15:37.990", "references": [{"url": "https://me.sap.com/notes/3665900", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system\ufffds confidentiality, integrity, and availability."}, {"lang": "es", "value": "Debido a una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en SAP Business Connector, un atacante autenticado con acceso administrativo y acceso a la red adyacente podr\u00eda cargar contenido especialmente dise\u00f1ado al servidor. Si es procesado por la aplicaci\u00f3n, este contenido permite la ejecuci\u00f3n de comandos arbitrarios del sistema operativo. La explotaci\u00f3n exitosa podr\u00eda llevar al compromiso total de la confidencialidad, integridad y disponibilidad del sistema."}], "lastModified": "2026-10-18T21:10:00.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:business_connector:4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99F0C742-7E03-425D-BCFC-F4683843350F"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}