CVE-2025-42906 | SAP Commerce Cloud COM_CLOUD 2211 Administration Console path traversal

October 14, 2025 Yanac

A vulnerability, which was classified as critical, has been found in SAP Commerce Cloud COM_CLOUD 2211. The affected element is an unknown function of the component Administration Console. This manipulation causes path traversal.

This vulnerability is tracked as CVE-2025-42906. The attack is possible to be carried out remotely. No exploit exists.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More