CVE-2025-30014: SAP SE SAP Capital Yield Tax Management

High severity, CVSS 7.7. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.

Affected products

• SAP SE SAP Capital Yield Tax Management

Published 2025-04-08. Last modified 2026-06-17.