CoreCVE
Back

MEDIUM

In SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker can generate a link that, if clicked by a logged-in user, can be redirected to a malicious page that could read or modify sensitive information, or expose the user to a phishing attack, with little impact on confidentiality and integrity

Published Dec 13, 2022

Description

In SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker can generate a link that, if clicked by a logged-in user, can be redirected to a malicious page that could read or modify sensitive information, or expose the user to a phishing attack, with little impact on confidentiality and integrity.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner sap
Published Dec 13, 2022
Updated Apr 18, 2025
Reserved Sep 21, 2022
Link CVE-2022-41275

CISA Vulnrichment

Updated Apr 18, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-41275

Red Hat

No data

ENISA EUVD

Assigner sap
Published Dec 13, 2022
Updated Apr 18, 2025
Link EUVD-2022-44484

GitHub

No data