CVE-2022-41215

Опубликовано: 08 нояб. 2022

Источник: nvd

CVSS3: 4.7

EPSS Низкий

Описание

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information.

Ссылки

https://launchpad.support.sap.com/#/notes/3251202
Permissions Required
Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3251202
Permissions Required
Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:789:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00158

Низкий

4.7 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

GHSA-8mc3-f8rm-5q5q