Vulnerability · Published Jul 8, 2025 · Assigned by sap
CVE-2025-42985Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench
Medium 6.1
In plain English
A medium-severity open redirect in SAP BusinessObjects Content Administrator workbench from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Official description
Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could potentially lead to the exposure or modification of web client data, resulting in low impact on confidentiality and integrity, with no impact on application availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | SAP BusinessObjects Content Administrator workbench | DW4CORE 100200300400SAP_BW 700701702731 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N