CVE-2017-16679 URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45,...
MediumCVSS 6.1
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap kernel | = 7.21 | No fix listed |
| sap kernel | = 7.21ext | No fix listed |
| sap kernel | = 7.22 | No fix listed |
| sap kernel | = 7.22ext | No fix listed |
| sap kernel | = 7.45 | No fix listed |
| sap kernel | = 7.49 | No fix listed |
| sap kernel | = 7.52 | No fix listed |
| SAP Startup Service | = SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52. | No fix listed |
References
- 102157 third-party-advisory vdb-entry
- blogs.sap.com issue-tracking vendor-advisory
- launchpad.support.sap.com permissions-required vendor-advisory