Description (CNA)
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP BusinessObjects Business Intelligence Platform (SAPUI5) | affected < 420; affected < 430 |
CWE
CWE-1022
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806
- https://launchpad.support.sap.com/#/notes/3063048
ADP enrichment
No English description supplied.