CVE-2025-30014
CVSS 3.1 Score 7.7 of 10 (high)
Details
Published Apr 8, 2025
CWE ID 35
Summary
CVE-2025-30014 is a directory traversal vulnerability affecting SAP Capital Yield Tax Management. An attacker with low privileges can exploit this issue due to insufficient path validation, gaining unauthorized access to read files from directories they should not have access to. The impact on confidentiality is significant, while integrity and availability are not affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.