3.4 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
36.3%
In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.
[
{
"product": "SAP GUI for Windows",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 7.60 PL10"
},
{
"status": "affected",
"version": "< 7.70 PL1"
}
]
}
]