Beveiligingsadvies

CVE-2025-42934

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-12 02:04:50

Laatst bijgewerkt 2025-08-12 14:06:11

Toegewezen door sap

CVSS-score 4.3

Status PUBLISHED

Beschrijving

SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability.

← Alle CVE's bekijken Bekijk op cve.org ↗