| Package | Affected versions | Patched versions |
|---|---|---|
| business connector | ≤ core_fix_7 |
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free