NVD

Id
32193  
Name
CVE-2014-4159  
Description
Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-06-13  
Modified Date
2016-12-15  
Seq
2014-4159  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
169244 32193 CVE-2014-4159 http://blog.emaze.net/2014/05/sap-multiple-vulnerabilities.html  View
169245 32193 CVE-2014-4159 http://scn.sap.com/docs/DOC-8218  View
169246 32193 CVE-2014-4159 67997  View
169247 32193 CVE-2014-4159 https://service.sap.com/sap/support/notes/1946420  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14059 JVNDB-2014-002934 SAP Supplier Relationship Management におけるオープンリダイレクトの脆弱性 SAP Supplier Relationship Management (SRM) には、オープンリダイレクトの脆弱性が存在します。 CVE-2014-4159 71447 CVE-2014-4159 32193 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002934.html 2014-05-28 2014-06-17 View