Symptom
The issue pertains to the Subscribe Form component in SAP SuccessFactors Recruiting Marketing (RMK). When a candidate enters their email address in the Subscribe Form component and submits it, the email address appears in the URL under the parameter `ucc_email`.
Environment
SAP SuccessFactors Recruiting Marketing
Reproducing the Issue
- Navigate to the RMK Site.
- Click on 'Job Alerts' in the menu (a content page with Subscribe Form Component).
- Enter an email address and submit the form.
- Complete all required details, accept the Data Privacy Statement, and click the 'Create Account' button.
- Click on 'Job Alert' again.
- Enter the same email address used during the login process.
- Observe the URL displayed in the browser, which contains the candidate's email in the `ucc_email` parameter.
Cause
The URL parameter `ucc_email` is not restricted from appearing in the browser URL during the redirection process for logged-in use cases.
Resolution
The fix restricts the `ucc_email` parameter from appearing in the URL during redirection for logged-in use cases.
The fix for this issue is planned to be deployed on 1H 2026 release.
For release timelines, please review SAP SuccessFactors Product Release & Road Map Information.
Keywords
subscribe form, email address in URL, sap successfactors recruiting marketing, RMK, data breach, ucc_email parameter, URL redirection, candidate account creation, RCM integration, job alerts, sap recruiting marketing, RCM-156879. , KBA , LOD-SF-RMK-INT , Int with RCM, Data Mapping, AwLi, Multilocation posting , Problem
SAP Knowledge Base Article - Public