SAPCAR vulnerabilities
CVEs whose affected-version data names the SAPCAR package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-43001Medium· 6.9Multiple Privilege Escalation Vulnerabilities in SAPCAR
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an att…
▾ SunlitSAP_SE · SAPCAREPSS 0.15%via CVEORG
CVE-2025-42992Medium· 6.9Multiple Privilege Escalation Vulnerabilities in SAPCAR
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in …
▾ SunlitSAP_SE · SAPCAREPSS 0.14%via CVEORG