| Package | Affected versions | Patched versions |
|---|---|---|
| document management system | = 600= 602= 603= 604= 605= 606= 617 | |
| erp | = 618 | |
| s4core | = 102= 103= 104= 105= 106= 107= 108 |
The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free