Login Request a demo
BC
Product
Business Connector
by Sap · last CVE Jan 13, 2026
7
CVEs
0
On KEV
6.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 0
Severity
All severities7Critical0High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Business Connector to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-42894
6.8
0%
Nov 11
Path Traversal vulnerability in SAP Business Connector
Affected: 4.8
CVE-2025-42892
6.8
1%
Nov 11
OS Command Injection vulnerability in SAP Business Connector
Affected: 4.8
CVE-2026-0514
6.1
0%
Jan 13
Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
Affected: 4.8
CVE-2025-42893
6.1
0%
Nov 11
Open Redirect vulnerability in SAP Business Connector
Affected: 4.8
CVE-2025-42886
6.1
0%
Nov 11
Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
Affected: 4.8
CVE-2006-0731
–
3%
Feb 16
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter,…
Affected: through core_fix_7
CVE-2006-0732
–
3%
Feb 16
Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to (1)…
Affected: 4.6; 4.7
Showing 7