Sapcar (Sap Se) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-07-08. Vendor: Sap Se.

CVEs of Sapcar

• CVE-2025-43001 - CVSS 6.9 (medium), 2025-07-08: SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting…
• CVE-2025-42992 - CVSS 6.9 (medium), 2025-07-08: SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files…
• CVE-2025-42971 - CVSS 4 (medium), 2025-07-08: A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this…
• CVE-2025-42970 - CVSS 5.8 (medium), 2025-07-08: SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing…
• CVE-2022-26100 - CVSS 9.8 (critical), 2022-03-10: SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may…