{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-42924",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-42924",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-11-11T00:20:31.304Z",
    "updatedAt": "2025-11-12T20:09:38.058Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)",
      "summary": "SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the attacker. This has low impact on confidentiality and integrity of the application with no impact on availability.",
      "affected": [
        {
          "vendor": "SAP_SE",
          "product": "SAP S/4HANA landscape (SAP E-Recruiting BSP)",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "S4ERECRT 100",
              "status": "affected"
            },
            {
              "version": "200",
              "status": "affected"
            },
            {
              "version": "ERECRUIT 600",
              "status": "affected"
            },
            {
              "version": "603",
              "status": "affected"
            },
            {
              "version": "604",
              "status": "affected"
            },
            {
              "version": "605",
              "status": "affected"
            },
            {
              "version": "606",
              "status": "affected"
            },
            {
              "version": "616",
              "status": "affected"
            },
            {
              "version": "617",
              "status": "affected"
            },
            {
              "version": "800",
              "status": "affected"
            },
            {
              "version": "801",
              "status": "affected"
            },
            {
              "version": "802",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}