CVE-2025-42941: Use of Web Link to Untrusted Target with window.opener Access

SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...

Code injection

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner...