SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker can craft a malicious link that, when clicked by an authenticated user, causes the browser to load attacker‑controlled content from an external location. This can be used to exfiltrate sensitive information from the victim's session, resulting in a high impact on confidentiality while leaving integrity and availability unaffected.

The affected product is SAP Fiori Launchpad from SAP SE. No specific version constraints are listed, so the vulnerability may exist across all supported releases of the product at the time of disclosure.

The CVSS score of 5.3 indicates a medium severity vulnerability. The Attack Vector is user‑interaction; an attacker must first lure an authenticated user to click the crafted link, making the exploitation dependent on user behavior. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, which reduces the urgency compared to actively exploited flaws. However, because the flaw leads to a confidentiality breach, it remains a concern for organizations that handle sensitive data within SAP Fiori Launchpad.