Description
An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability.
Scores
CVSS v3
7.5
EPSS
0.0012
EPSS Percentile
30.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-428
Status
published
Products (1)
sap/setup
9.0
Published
Apr 14, 2021
Tracked Since
Feb 18, 2026