Open Redirect Vulnerability in SAP Business Connector

CVE-2025-42893

What is CVE-2025-42893?

An Open Redirect vulnerability exists in SAP Business Connector, enabling an unauthenticated attacker to construct a malicious URL that can redirect users to an attacker-controlled site. This exploitation method takes advantage of the application's handling of URLs, which, when accessed by unsuspecting victims, leads to a compromised environment presented within an embedded frame. By successfully executing this vulnerability, the attacker can potentially intercept sensitive data and perform unauthorized actions, raising significant concerns regarding the confidentiality and integrity of web client data.

References