Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-40306

URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)

Default version status: unaffected

  • 103affected
  • 104affected
  • 105affected
  • 106affected

References