VYPR

Business Server Pages

by SAP

CVEs (2)

  • CVE-2026-40137MedMay 12, 2026
    risk 0.40cvss 6.1epss 0.00

    SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker?controlled sites, potentially exposing or altering sensitive information in the victim�s browser. This…

  • CVE-2026-24328MedFeb 10, 2026
    risk 0.40cvss 6.1epss 0.00

    SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to attacker?controlled sites, potentially exposing or altering sensitive information in the victim�s browser. This results in…