Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-42985

Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could potentially lead to the exposure or modification of web client data, resulting in low impact on confidentiality and integrity, with no impact on application availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Content Administrator workbench

Default version status: unaffected

  • DW4CORE 100affected
  • 200affected
  • 300affected
  • 400affected
  • SAP_BW 700affected
  • 701affected
  • 702affected
  • 731affected
  • 740affected
  • 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected
  • 758affected
  • 816affected
  • SAP_BW_VIRTUAL_COMP 701affected

References