Description
SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) | 103, 104, 105, 106 | — |
Advisories 3
- WID-SEC-2024-0811 SAP Patch Day April 2024: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 8, 2024
- WID-SEC-2023-2309 SAP Patchday September 2023 BSI CERT-Bund (WID) · Sep 11, 2023
- WID-SEC-2023-2294 SAP Software: Schwachstelle ermöglicht Darstellen falscher Informationen BSI CERT-Bund (WID) · Sep 10, 2023