CVE-2021-27612

In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.

Link	Resource
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655	Vendor Advisory
https://launchpad.support.sap.com/#/notes/3023078	Permissions Required Vendor Advisory

Configuration 1

cpe:2.3:a:sap:gui_for_windows:7.60:patch_level1:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level2:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level3:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level4:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level5:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level6:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:-:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level7:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level8:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level8_hotfix1:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.60:patch_level9:*:*:*:*:*:* cpe:2.3:a:sap:gui_for_windows:7.70:-:*:*:*:*:*:*

---

Published : 2021-05-11 03:15

Updated : 2021-06-29 01:50

---

NVD link : CVE-2021-27612

Mitre link : CVE-2021-27612

No products.

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')