CVE-2025-42924 — Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)

CVE-2025-42924

Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP) PUBLISHED

Description (CNA)

SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the attacker. This has low impact on confidentiality and integrity of the application with no impact on availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4HANA landscape (SAP E-Recruiting BSP)	affected S4ERECRT 100; affected 200; affected ERECRUIT 600; affected 603; affected 604; affected 605; affected 606; affected 616; affected 617; affected 800; affected 801; affected 802

CWE

CWE-601

References

https://me.sap.com/notes/3642398
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.