Количество 3
Количество 3
CVE-2025-42934
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability.
GHSA-hcg5-jj2p-p5vq
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability.
BDU:2025-16188
Уязвимость компонента Supplier invoice программной платформы SAP S/4HANA, позволяющая нарушителю обойти ограничения безопасности
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-42934 SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability. | CVSS3: 4.3 | 0% Низкий | около 1 года назад |
| GHSA-hcg5-jj2p-p5vq SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability. | CVSS3: 4.3 | 0% Низкий | около 1 года назад |
 | BDU:2025-16188 Уязвимость компонента Supplier invoice программной платформы SAP S/4HANA, позволяющая нарушителю обойти ограничения безопасности | CVSS3: 4.3 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу