VDB
CVE-2026-24328
CVE-2026-24328
PUBLISHED
CVSS 6.099999904632568 MEDIUM
SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to attacker?controlled sites, potentially exposing or altering sensitive information in the victim�s browser. This results in a low impact on confidentiality and integrity, with no impact on the availability of the application.
EPSS 0.09% · 25.6th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.09%
25.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | Business Server Pages Application (TAF_APPLAUNCHER) | 758, ST-PI 2008_1_700, 2008_1_710 |
| sap | business_server_pages | 740, 2008_1_710, 758 |
Exploit Intelligence
Timeline
- Feb 10, 2026 CVE Published
- Feb 10, 2026 EPSS Score
- Feb 12, 2026 EPSS Score
- Feb 14, 2026 EPSS Score
- Feb 15, 2026 CVE Updated
- Feb 16, 2026 EPSS Score
- Feb 18, 2026 EPSS Score
- Feb 20, 2026 EPSS Score
- Feb 22, 2026 EPSS Score
- Feb 24, 2026 EPSS Score
- Feb 26, 2026 EPSS Score
- Feb 28, 2026 EPSS Score