SAP Biller Direct allows an unauthenticated malicious user to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized parameter to redirect the victim to a malicious site of the attacker's choosing which can result in disclosure or modification of the victim's information.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sap biller direct 750 |
||
sap biller direct 635 |
Vulmon