CVE-2026-0505 — Multiple vulnerabilities in BSP Applications of SAP Document Management System
The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection…
Published: 2026-02-10 · CVSS: 6.1 · CVSS 3.1
The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7