OS Command Injection Vulnerability in SAP Business Connector by SAP

CVE-2025-42892

What is CVE-2025-42892?

An OS Command Injection vulnerability exists in SAP Business Connector that could allow an authenticated attacker with administrative privileges and adjacent network access to upload specially crafted content. If processed by the application, this could lead to the execution of arbitrary operating system commands, threatening the system’s confidentiality, integrity, and availability.

References