CVE-2026-24315

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

4.2 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N                                    

Vulnerability Description

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system causing low impact on Confidentiality and Integrity. Availability of the system is no impacted.

Vulnerability Details

Published Date

June 09, 2026

Last Modified

June 09, 2026

CWE ID

CWE-35

Source

NVD

Vendor

SAP_SE

Product

SAP Fiori (launchpad)

External References

https://me.sap.com/notes/3682699
https://url.sap/sapsecuritypatchday

CVE-2026-24315

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment