Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-0505

Multiple vulnerabilities in BSP Applications of SAP Document Management System

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Document Management System

Default version status: unaffected

  • SAP_APPL 618affected
  • S4CORE 102affected
  • 103affected
  • 104affected
  • 105affected
  • 106affected
  • 107affected
  • 108affected
  • 109affected
  • EA-APPL 600affected
  • 602affected
  • 603affected
  • 604affected
  • 605affected
  • 606affected
  • 617affected

References