What’s Vulnerable › Vulnerabilities
CVE-2025-42924: Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-11-11 · updated 2026-10-18
- Weakness: CWE-601
Description
SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the attacker. This has low impact on confidentiality and integrity of the application with no impact on availability.
Affected products
- SAP_SE SAP S/4HANA landscape (SAP E-Recruiting BSP): S4ERECRT 100, 200, ERECRUIT 600, 603, 604, 605 (+6)
References
Get alerted when CVE-2025-42924 or the next vulnerability affects your stack