Description

SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability.

INFO

Published Date :

2025-08-12T02:04:50.681Z

Last Modified :

2025-08-12T14:06:11.798Z

Source :

sap
AFFECTED PRODUCTS

The following products are affected by CVE-2025-42934 vulnerability.

Vendors Products
Sap
  • S/4hana
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-42934.

URL Resource
https://me.sap.com/notes/3616863 cve-icon cve-icon
https://url.sap/sapsecuritypatchday cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact