Description (CNA)
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / SAP NetWeaver (forums) | affected = 7.30; affected = 7.31; affected = 7.40 |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/2658755
- http://www.securityfocus.com/bid/105898
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
ADP enrichment
No English description supplied.