CVE-2006-0731

Опубликовано: 16 фев. 2006

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.

Ссылки

http://secunia.com/advisories/18880
Vendor Advisory
http://securitytracker.com/id?1015639
http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Phishing_Vector_in_SAP_BC.pdf
Vendor Advisory
http://www.securityfocus.com/archive/1/425056/100/0/threaded
http://www.securityfocus.com/archive/1/434012/30/4980/threaded
http://www.securityfocus.com/bid/16671
http://www.vupen.com/english/advisories/2006/0611
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24751
http://secunia.com/advisories/18880
Vendor Advisory
http://securitytracker.com/id?1015639
http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Phishing_Vector_in_SAP_BC.pdf
Vendor Advisory
http://www.securityfocus.com/archive/1/425056/100/0/threaded
http://www.securityfocus.com/archive/1/434012/30/4980/threaded
http://www.securityfocus.com/bid/16671
http://www.vupen.com/english/advisories/2006/0611
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24751

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sap:business_connector:*:*:*:*:*:*:*:*

Версия до core_fix_7 (включая)

EPSS

Процентиль: 90%

0.06019

Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5383-fm28-rp7h

github

почти 4 года назад