Boletines de Vulnerabilidades

CVE-2026-40137

   
Software afectado SAP
 
SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker?controlled sites, potentially exposing or altering sensitive information in the victim�s browser. This results in a low impact on confidentiality and integrity, with no impact on the availability of the application.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-40137