Описание
Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.
Ссылки
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Permissions Required
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Permissions Required
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sap:bi_launchpad:4.10:*:*:*:*:*:*:*
cpe:2.3:a:sap:bi_launchpad:4.20:*:*:*:*:*:*:*
cpe:2.3:a:sap:bi_launchpad:4.30:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00211
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.
EPSS
Процентиль: 43%
0.00211
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-918