Directory Traversal Vulnerability in SAP S/4HANA - Bank Communication Management

CVE-2025-42946

What is CVE-2025-42946?

A directory traversal vulnerability in SAP S/4HANA's Bank Communication Management allows a privileged attacker to access sensitive operating system files. By exploiting this vulnerability, the attacker could potentially read or delete critical files, thereby compromising the confidentiality of sensitive data. This issue underscores the importance of securing transaction methods to prevent unauthorized access to system internals.

References