CVE-2025-42985

Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench

Severity Score

6.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could potentially lead to the exposure or modification of web client data, resulting in low impact on confidentiality and integrity, with no impact on application availability.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2025-04-16 CVE Reserved
2025-07-08 CVE Published
2025-07-08 CVE Updated
2025-08-09 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

CAPEC

References (2)

URL	Tag	Source
https://me.sap.com/notes/3617380
https://url.sap/sapsecuritypatchday

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				200 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "200"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				300 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "300"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				400 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "400"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				701 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "701"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				702 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "702"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				731 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "731"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				740 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "740"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				750 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "750"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				751 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "751"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				752 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "752"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				753 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "753"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				754 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "754"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				755 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "755"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				756 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "756"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				757 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "757"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				758 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "758"		en		Affected
SAP SE Search vendor "SAP SE"		SAP BusinessObjects Content Administrator Workbench Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench"				816 Search vendor "SAP SE" for product "SAP BusinessObjects Content Administrator Workbench" and version "816"		en		Affected