Skip to content
OpenAdvisories

Product · SAP

SAP Cloud

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 10.0

    OAuth2 SSRF vulnerability in SAP Cloud SDK for Python

    The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials…