CVE-2026-24328 PUBLISHED CVSS 6.099999904632568 MEDIUM

SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to attacker?controlled sites, potentially exposing or altering sensitive information in the victim�s browser. This results in a low impact on confidentiality and integrity, with no impact on the availability of the application.

EPSS 0.08% · 23.1th percentile

Risk Scores

CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.08%
23.1th percentile

Affected Products

VendorProductVersions
SAP_SEBusiness Server Pages Application (TAF_APPLAUNCHER)ST-PI 2008_1_700, 2008_1_710, 740
sapbusiness_server_pages740, 758, 2008_1_700

Timeline

References

Open in Interactive Console →