CVE-2017-16679
 
Severity Score
6.1
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site.
Vulnerabilidad de redirección de URL en SAP Startup Service; SAP KERNEL 32 NUC; SAP KERNEL 32 Unicode; SAP KERNEL 64 NUC; SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 y 7.22EXT y SAP KERNEL 7.21, 7.22, 7.45, 7.49 y 7.52, que permite que un atacante redirija usuarios a un sitio malicioso.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-11-09 CVE Reserved
- 2017-12-12 CVE Published
- 2023-05-05 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/102157 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017 | 2018-01-04 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Sap Search vendor "Sap" | Sap Kernel Search vendor "Sap" for product "Sap Kernel" | 7.21 Search vendor "Sap" for product "Sap Kernel" and version "7.21" | - |
Affected
| ||||||
Sap Search vendor "Sap" | Sap Kernel Search vendor "Sap" for product "Sap Kernel" | 7.21ext Search vendor "Sap" for product "Sap Kernel" and version "7.21ext" | - |
Affected
| ||||||
Sap Search vendor "Sap" | Sap Kernel Search vendor "Sap" for product "Sap Kernel" | 7.22 Search vendor "Sap" for product "Sap Kernel" and version "7.22" | - |
Affected
| ||||||
Sap Search vendor "Sap" | Sap Kernel Search vendor "Sap" for product "Sap Kernel" | 7.22ext Search vendor "Sap" for product "Sap Kernel" and version "7.22ext" | - |
Affected
| ||||||
Sap Search vendor "Sap" | Sap Kernel Search vendor "Sap" for product "Sap Kernel" | 7.45 Search vendor "Sap" for product "Sap Kernel" and version "7.45" | - |
Affected
| ||||||
Sap Search vendor "Sap" | Sap Kernel Search vendor "Sap" for product "Sap Kernel" | 7.49 Search vendor "Sap" for product "Sap Kernel" and version "7.49" | - |
Affected
| ||||||
Sap Search vendor "Sap" | Sap Kernel Search vendor "Sap" for product "Sap Kernel" | 7.52 Search vendor "Sap" for product "Sap Kernel" and version "7.52" | - |
Affected
|