Security Advisory

CVE-2025-42934

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-12 02:04:50

Last updated 2025-08-12 14:06:11

Assigner sap

State PUBLISHED

Description

SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the Trusted Sites configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the applications integrity and no impact on confidentiality or availability.

← Browse all CVEs View on cve.org ↗