Known vulnerabilities in SAP Business Connector

Vendor: SAP
Software: SAP Business Connector
Software CPE: cpe:2.3:a:sap:sap_business_connector:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP Business Connector SAP Business Connector is affected by 5 known vulnerabilities: 5 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121199 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0514		 CWE-79 Low
No
No
 - 13.01.2026 SB2026011341
#VU118541 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-42886		 CWE-79 Low
No
No
 - 14.11.2025 SB20251114102
#VU118540 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-42893		 CWE-601 Low
No
No
 - 14.11.2025 SB20251114102
#VU118539 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-42894		 CWE-22 Low
No
No
 - 14.11.2025 SB20251114102
#VU118538 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-42892		 CWE-78 Low
No
No
 - 14.11.2025 SB20251114102