Boletines de Vulnerabilidades

CVE-2025-42990

   
Software afectado SAP
 
Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, with the goal of redirecting users to the attacker controlled URL. This issue could impact the integrity of the application. Confidentiality or Availability are not impacted.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-42990