CoreCVE
Back

MEDIUM

Due to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management - version 1100, an attacker can redirect a user to a malicious website

Published Dec 13, 2022

Description

Due to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management - version 1100, an attacker can redirect a user to a malicious website. In order to perform this attack, the attacker sends an email to the victim with a manipulated link that appears to be a legitimate SAP Sourcing URL, since the victim doesn’t suspect the threat, they click on the link, log in to SAP Sourcing and CLM and at this point, they get redirected to a malicious website.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner sap
Published Dec 13, 2022
Updated Apr 22, 2025
Reserved Sep 21, 2022
Link CVE-2022-41273
CISA Vulnrichment
Updated Apr 22, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-41273
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-41273