CVE-2022-41207

The CVE-2022-41207 entry concerns SAP Biller Direct and describes an unauthenticated open redirect vulnerability where an unsensitized parameter in a crafted URL can redirect victims to a malicious site, potentially enabling disclosure or modification of victim information. Connected sources cons...

CVE-2023-42479

SAP Biller Direct is affected by CVE-2023-42479, an unauthenticated XSS vulnerability where an attacker can embed a hidden Biller Direct URL in a frame that, when loaded by a user, triggers a cross-site scripting request. This can lead to disclosure or modification of non-sensitive information. T...