CVE-2017-16679

CWE-601 — Open Redirect3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.3%
top 46.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SAP Startup ServiceSAP SAP Kernel
Timeline
PublishedDec 12
Latest updateMay 14

Description

URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶NVDsap/sap_kernel7 versions+6
▶CVEListV5sap/sap_startup_serviceSAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52.

🔴Vulnerability Details

2
GHSA
GHSA-757w-wphr-p72r: URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7↗2022-05-14
▶
CVEList
CVE-2017-16679: URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7↗2017-12-12
▶
CVE-2017-16679 (MEDIUM CVSS 6.1) | URL redirection vulnerability in SA | cvebase.io