Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open Redirect vulnerability in SAP Business Connector
Vulnerability Description
Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site displayed within an embedded frame. Successful exploitation could allow the attacker to steal sensitive information and perform unauthorized actions, impacting the confidentiality and integrity of web client data. There is no impact to system availability resulting from this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
SAP Business Connector 输入验证错误漏洞
Vulnerability Description
SAP Business Connector是德国思爱普(SAP)公司的一种中间件。 SAP Business Connector存在输入验证错误漏洞,该漏洞源于存在开放重定向漏洞,可能导致敏感信息泄露和未授权操作。
CVSS Information
N/A
Vulnerability Type
N/A