CVE-2025-42906

Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud (affected versions not specified)

Description SAP Commerce Cloud contains a path traversal issue that could allow users to access web applications, such as the Administration Console, from locations where it is not explicitly deployed. This may bypass configured access restrictions. The impact on confidentiality is considered low, with no impact on integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.