CVE-2021-27612

In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.
References
Configurations

Configuration 1

cpe:2.3:a:sap:gui_for_windows:7.60:patch_level1:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level2:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level3:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level4:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level5:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level6:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:-:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level7:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level8:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level8_hotfix1:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.60:patch_level9:*:*:*:*:*:*
cpe:2.3:a:sap:gui_for_windows:7.70:-:*:*:*:*:*:*

Information

Published : 2021-05-11 03:15

Updated : 2021-06-29 01:50


NVD link : CVE-2021-27612

Mitre link : CVE-2021-27612

Products Affected
No products.
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')