CVE-2026-0505
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Summary
The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP_SE | SAP Document Management System | SAP_APPL 618 | affected |
| SAP_SE | SAP Document Management System | S4CORE 102 | affected |
| SAP_SE | SAP Document Management System | 103 | affected |
| SAP_SE | SAP Document Management System | 104 | affected |
| SAP_SE | SAP Document Management System | 105 | affected |
| SAP_SE | SAP Document Management System | 106 | affected |
| SAP_SE | SAP Document Management System | 107 | affected |
| SAP_SE | SAP Document Management System | 108 | affected |
| SAP_SE | SAP Document Management System | 109 | affected |
| SAP_SE | SAP Document Management System | EA-APPL 600 | affected |
| SAP_SE | SAP Document Management System | 602 | affected |
| SAP_SE | SAP Document Management System | 603 | affected |
| SAP_SE | SAP Document Management System | 604 | affected |
| SAP_SE | SAP Document Management System | 605 | affected |
| SAP_SE | SAP Document Management System | 606 | affected |
| SAP_SE | SAP Document Management System | 617 | affected |
Weaknesses
- CWE-79: CWE-79: Improper Neutralization of Input During Web Page Generation
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.