Approuter vulnerabilities
3 known vulnerabilities in Approuter from SAP. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
SAP Business AI Platform (Approuter): URL Redirection to Untrusted Site
SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled destination. The atta
- 8.1 High severity
SAP Approuter: URL Redirection to Untrusted Site
SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized ac
- 9.1 Critical severity
SAP Approuter: Inconsistent Interpretation of HTTP Requests
Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system