PT-2026-7222 · Unknown · Bsp Applications

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-24323

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BSP applications (affected versions not specified)

Description The applications allow an unauthenticated user to inject malicious script content through user-controlled URL parameters that are not adequately sanitized. When a victim accesses a manipulated URL, the injected script executes in the victim’s browser, resulting in a low impact on confidentiality and integrity, and no impact on application availability. The vulnerability involves the injection of malicious script via URL parameters like parameter1 and parameter2.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-24323

Affected Products

Bsp Applications

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24323 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24323 · Vendor Advisory
• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://me.sap.com/notes/3678417 · Note