Description
The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensitive information (cookies and SAPPASSPORT) via unspecified vectors.
Unscored
CVE-2013-6814
EUVD-2013-6616GHSA-wgwf-2ggj-35f4
The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing…
Published Nov 19, 2013 · Updated Aug 6, 2024 · Assigned by mitre