PT-2026-7205 · Unknown · Bsp Applications

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-0505

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BSP applications (affected versions not specified)

Description The applications permit an unauthenticated user to alter URL parameters without proper validation. This can lead to redirection to websites controlled by an attacker. The impact is considered low for confidentiality and integrity, with no impact on availability. The vulnerable component involves user-controlled URL parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-0505

Affected Products

Bsp Applications

References · 5

• https://osv.dev/vulnerability/CVE-2026-0505 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0505 · Security Note
• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://me.sap.com/notes/3678417 · Note
• https://t.me/cveNotify/151514 · Telegram Post