This vulnerability allows an attacker to craft a malicious URL that triggers a service call on the SAP Fiori launchpad domain, enabling the compromise of user accounts by stealing credentials. The issue is a path traversal flaw (CWE‑35) that does not affect system-wide confidentiality or integrity in most deployments, and it does not impact availability. The overall effect is moderate because it relies on advanced system knowledge and user interaction.

SAP Fiori (launchpad) from SAP SE; no specific version data is available.

The CVSS base score of 4.2 indicates low severity. EPSS information is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation. The attack vector is inferred to be a user‑initiated web request crafted by the attacker, which then triggers unauthorized internal service calls. The adversary must possess advanced knowledge of the system, making exploitation relatively low but not negligible. The path traversal flaw permits attacker‑controlled input to influence service calls, potentially leading to credential theft.