CVE-2014-4159

CVE-2014-4159 is an open redirect vulnerability affecting SAP Supplier Relationship Management (SRM) in the la/umTestSSO.jsp path. The root cause is an unsafe handling of the url parameter, enabling remote attackers to redirect users to arbitrary external sites, potentially facilitating phishing....