SAP Fiori 754 Launchpad reverse tabnabbing

Summaryinfo

A vulnerability marked as problematic has been reported in SAP Fiori 754. The impacted element is an unknown function of the component Launchpad. Performing a manipulation results in reverse tabnabbing. This vulnerability is identified as CVE-2025-42941. The attack can be initiated remotely. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.

Detailsinfo

A vulnerability classified as problematic has been found in SAP Fiori 754. This affects an unknown code of the component Launchpad. The manipulation with an unknown input leads to a reverse tabnabbing vulnerability. CWE is classifying the issue as CWE-1022. The web application produces links to untrusted external sites outside of its sphere of control, but it does not properly prevent the external site from modifying security-critical properties of the window.opener object, such as the location property. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link () elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary for certain configurations, the attacker does not need the administrative privileges to execute the attack. This could result in unintended manipulation of user sessions or exposure of sensitive information. The issue impacts the confidentiality and integrity of the system, but the availability remains unaffected.

It is possible to read the advisory at me.sap.com. This vulnerability is uniquely identified as CVE-2025-42941 since 04/16/2025. The exploitability is told to be easy. It is possible to initiate the attack remotely. The exploitation needs additional levels of successful authentication. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/12/2025).

Applying a patch is able to eliminate this problem.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• SAP

Name

• Fiori

Version

• 754

License

• commercial

Website

• Vendor: https://www.sap.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion