SAP Note 3563929
Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)
HighCVSS 7.1SAP HANA extended application services, advanced model
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2025-24868
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products and versions
- Product SAP HANA extended application services, advanced model (User Account and Authentication Services)
Versions: SAP_EXTENDED_APP_SERVICES 1
Appears in
Patch Days listing this note, newest first.
- February 2025HighCVSS 7.1