Vulnerability · Published Jul 8, 2025 · Assigned by sap

CVE-2025-42985Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench

Medium 6.1

In plain English

A medium-severity open redirect in SAP BusinessObjects Content Administrator workbench from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.3%top 82.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could potentially lead to the exposure or modification of web client data, resulting in low impact on confidentiality and integrity, with no impact on application availability.

Affected products (as reported)

Vendor	Product	Versions
SAP_SE	SAP BusinessObjects Content Administrator workbench	DW4CORE 100200300400SAP_BW 700701702731

Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In plain English

Official description

Affected products (as reported)

References