PT-2026-7222 · Unknown · Bsp Applications

Publicado 2026-02-10 · Atualizado 2026-02-10 · CVE-2026-24323

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BSP applications (affected versions not specified)

Description The applications allow an unauthenticated user to inject malicious script content through user-controlled URL parameters that are not adequately sanitized. When a victim accesses a manipulated URL, the injected script executes in the victim’s browser, resulting in a low impact on confidentiality and integrity, and no impact on application availability. The vulnerability involves the injection of malicious script via URL parameters like parameter1 and parameter2.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2026-24323

Produtos afetados

Bsp Applications

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24323 · Nota de Segurança
• https://me.sap.com/notes/3678417 · Nota
• https://osv.dev/vulnerability/CVE-2026-24323 · Aviso do Fabricante
• https://url.sap/sapsecuritypatchday · Aviso do Fabricante