CNNVD-202601-2324 Information

CNNVD ID

CNNVD-202601-2324

CVE-2026-0514

  • CNNVD Published: 2026-01-13

Description (Chinese)

SAP Business Connector是德国思爱普(SAP)公司的一种中间件。 SAP Business Connector存在跨站脚本漏洞,该漏洞源于跨站脚本,可能导致未经验证的攻击者制作恶意链接将用户重定向至攻击者控制的站点,影响机密性和完整性。

Description (English)

SAP Business Contractor is an intermediate of SAP in Germany. SAP Business Contractor has a cross-site script loophole, which originates from a cross-site script and may lead to uncertified assailants making malicious links that redirect users to sites controlled by the attackers, affecting confidentiality and integrity.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

思爱普

Published

2026-01-13

Last Modified

2026-02-24

References

https://me.sap.com/notes/3666061 https://url.sap/sapsecuritypatchday

Patch

https://url.sap/sapsecuritypatchday

Share on: