CVE-2025-42924

Summary (CVE-2025-42924) : The issue affects SAP S/4HANA landscape, specifically the SAP E-Recruiting BSP. An unauthenticated attacker can craft malicious links that, when clicked, redirect the victim to a page controlled by the attacker (open redirect). The documented impact is low for confident...

EUVD-2017-6012

Malware in sbrugna...

SAP E-Recruiting Input Validation Vulnerability

SAP E-Recruiting also known as ERECRUIT is a set of German SAP SAP electronic recruitment system. The system has automatic personnel screening, filtering and sorting functions. A security vulnerability exists in SAP E-Recruiting versions 605 through 617. A remote attacker could exploit this...

Code injection

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

CVE-2017-14511

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

CVE-2017-14511

CVE-2017-14511 affects SAP E-Recruiting (ERECRUIT) versions 605 through 617. An external applicant who registers receives an email verification link, but the verification mechanism can be bypassed, allowing attackers to register and confirm email addresses they do not own. The underlying issues c...

CVE-2017-14511

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

SAP E-Recruiting Email Verification Bypass Vulnerability

SAP E-Recruiting versions 605, 606, 616, and 617 suffer from an email verification bypass vulnerability. title: Email verification bypass product: SAP E-Recruiting vulnerable version: 605, 606, 616, 617 fixed version: see SAP security note number 2507798 impact: medium homepage: https://www.sap.c...

SAP E-Recruiting Email Verification Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Email verification bypass product: SAP E-Recruiting vulnerable version: 605, 606, 616, 617 fixed version: see SAP security note number 2507798 impact: medium homepage:...