SAP SE SAP Cloud Connector vulnerabilities

2 CVEs affecting SAP SE SAP Cloud Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-58242, published 2026-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-42955, published 2025-08-12. Low severity, CVSS 3.5. EPSS: 0.5% chance of exploitation in the next 30 days. Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP…
CVE-2026-58242, published 2026-10-13. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an…