CVE-2025-42985CWE-601

Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench

Medium · published July 8, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could potentially lead to the exposure or modification of web client data, resulting in low impact on confidentiality and integrity, with no impact on application availability.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-07-08T00:38Z
EPSS history
Timeline
  • 08 JUL 00:38Z
    Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench
    cvelistv5