CVE-2025-24868

Summary

CVE-2025-24868 is a vulnerability affecting the User Account and Authentication service (UAA) in SAP HANA extended application services, advanced model (SAP HANA XS advanced model). An attacker can craft a malicious link and redirect vulnerable systems to malicious sites through insufficient redirect URL validation. This issue can result in limited impact on the system's confidentiality, integrity, and availability. Unauthenticated attackers can exploit this vulnerability, making it a significant security concern for organizations using SAP HANA XS advanced model.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.