Unauthenticated Link Redirection Vulnerability in SAP E-Recruiting by SAP

CVE-2025-42924

What is CVE-2025-42924?

The SAP E-Recruiting component of the SAP S/4HANA landscape contains a vulnerability that enables unauthenticated attackers to create malicious links. When these links are clicked by unsuspecting users, they can be redirected to attacker-controlled pages, posing potential risks to user trust. While the impact on the confidentiality and integrity of the application is considered low, it is crucial to address this vulnerability to maintain security best practices. Organizations using SAP E-Recruiting are advised to implement appropriate security measures to mitigate this threat.

References