Privilege escalation in Sap Se Sapcar
CVE-2025-42992
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on integrity, but low impact on confidentiality and availability of the system.
EPSS: 0.001 (2.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.9 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L.
Affected products
- Sap_se Sapcar — versions SAP_CAR 7.53, 7.22EXT
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-42992?
- CVE-2025-42992 is a medium-severity vulnerability in Sap Se Sapcar, classified under Incorrect Privilege Assignment. CVSS score: 6.9/10. Published 2025-07-08.
- How severe is CVE-2025-42992?
- Medium severity. CVSS v3 base score is 6.9 out of 10.