CVE-2025-42893: falha de média gravidade em SAP_SE SAP Business Connector
Open Redirect vulnerability in SAP Business Connector
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.1epss 0.2%
Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site displayed within an embedded frame. Successful exploitation could allow the attacker to steal sensitive information and perform unauthorized actions, impacting the confidentiality and integrity of web client data. There is no impact to system availability resulting from this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
SAP_SE · SAP Business ConnectorCVEs relacionadas — SAP_SE SAP Business Connector
No mesmo produto, das mais perigosas para as menos.
CVE-2025-42892MEDIUMOS Command Injection vulnerability in SAP Business ConnectorEPSS 0.8%CVE-2024-30215MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2024-30214MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2025-42894MEDIUMPath Traversal vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2025-42886MEDIUMReflected Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.3%CVE-2026-0514MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorEPSS 0.2%