Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-26836

Опубликовано: 09 дек. 2020
Источник: nvd
CVSS3: 3.4
CVSS3: 6.1
CVSS2: 5.8
EPSS Низкий

Описание

SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the application URL and share it with the end user who could potentially become a victim of the attack.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*

EPSS

Процентиль: 89%
0.04929
Низкий

3.4 Low

CVSS3

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

github
больше 3 лет назад

SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the application URL and share it with the end user who could potentially become a victim of the attack.

EPSS

Процентиль: 89%
0.04929
Низкий

3.4 Low

CVSS3

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601