Sap_se Sap Fiori (Launchpad)
2 CVEs affecting Sap_se Sap Fiori (Launchpad). Latest disclosed: 2026-06-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24315 | Medium | 4.2 | 2026-06-09 | SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could comp… |
CVE-2025-42941 | Low | 3.5 | 2025-08-12 | SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link (<a>) elements. An attac… |