CNNVD-202511-1290 Information
Nov 11, 2025
cve
CNNVD ID
CNNVD-202511-1290
Related CVE
- CNNVD Published: 2025-11-11
Description (Chinese)
SAP S/4HANA是德国思爱普(SAP)公司的一个基于 SAP HANA 内存数据库系统的的企业资源管理软件。 SAP S/4HANA存在输入验证错误漏洞,该漏洞源于攻击者可制作恶意链接,可能导致受害者被重定向到攻击者控制的页面。
Description (English)
SAP S/4HANA is an enterprise resource management software based on the SAP HANA memory database system of SAP Germany. SAP S/4HANA has an input validation error loophole, which stems from the fact that the assailant can create a malicious link that could lead to the victim being redirected to the aggressor-controlled page.
Hazard Level
High
Vulnerability Type
输入验证错误
Affected Vendor
思爱普
Published
2025-11-11
Last Modified
2026-02-24
References
https://me.sap.com/notes/3642398 https://url.sap/sapsecuritypatchday https://access.redhat.com/security/cve/cve-2025-42924
Patch
https://url.sap/sapsecuritypatchday
Share on: