9 matches found
CVE-2025-42924: URL Redirection to Untrusted Site
SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the attacker. This has low impact on confidentiality and integrity of the application with no impact on availability...
EUVD-2017-6012
Malware in sbrugna...
SAP E-Recruiting Input Validation Vulnerability
SAP E-Recruiting also known as ERECRUIT is a set of German SAP SAP electronic recruitment system. The system has automatic personnel screening, filtering and sorting functions. A security vulnerability exists in SAP E-Recruiting versions 605 through 617. A remote attacker could exploit this...
Code injection
An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...
CVE-2017-14511
An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...
CVE-2017-14511
An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...
CVE-2017-14511: Improper Input Validation
An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...
SAP E-Recruiting Email Verification Bypass Vulnerability
SAP E-Recruiting versions 605, 606, 616, and 617 suffer from an email verification bypass vulnerability. title: Email verification bypass product: SAP E-Recruiting vulnerable version: 605, 606, 616, 617 fixed version: see SAP security note number 2507798 impact: medium homepage: https://www.sap.c...
SAP E-Recruiting Email Verification Bypass
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Email verification bypass product: SAP E-Recruiting vulnerable version: 605, 606, 616, 617 fixed version: see SAP security note number 2507798 impact: medium homepage:...