CVE-2026-24315

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system causing low impact on Confidentiality and Integrity. Availability of the system is no impacted.

CVSS v3 4.2 MEDIUM

4.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3682699
https://url.sap/sapsecuritypatchday

Configurations

No configuration.

History

23 Jul 2026, 08:10

Type	Values Removed	Values Added
Summary		(es) SAP Fiori Launchpad permite a los atacantes crear URL maliciosas que desencadenan llamadas de servicio arbitrarias en el dominio Fiori, esto, cuando es abierto por el usuario, podría comprometer cuentas robando credenciales de usuario. La explotación exitosa requiere que los adversarios posean conocimiento avanzado del sistema, causando bajo impacto en la Confidencialidad e Integridad. La disponibilidad del sistema no es impactada.

09 Jun 2026, 01:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-09 01:16

Updated : 2026-07-23 08:10

NVD link : CVE-2026-24315

Mitre link : CVE-2026-24315

CVE.ORG link : CVE-2026-24315

JSON object : View

Products Affected

No product.

CWE

CWE-35

Path Traversal: '.../...//'

{"id": "CVE-2026-24315", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24315", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-09T13:19:37.560851Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.6}]}, "affected": [{"source": "cna@sap.com", "affectedData": [{"vendor": "SAP_SE", "product": "SAP Fiori (launchpad)", "versions": [{"status": "affected", "version": "SAP_UI 754"}, {"status": "affected", "version": "755"}, {"status": "affected", "version": "756"}, {"status": "affected", "version": "757"}, {"status": "affected", "version": "758"}, {"status": "affected", "version": "816"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-09T01:16:45.740", "references": [{"url": "https://me.sap.com/notes/3682699", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-35"}]}], "descriptions": [{"lang": "en", "value": "SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system causing low impact on Confidentiality and Integrity. Availability of the system is no impacted."}, {"lang": "es", "value": "SAP Fiori Launchpad permite a los atacantes crear URL maliciosas que desencadenan llamadas de servicio arbitrarias en el dominio Fiori, esto, cuando es abierto por el usuario, podr\u00eda comprometer cuentas robando credenciales de usuario. La explotaci\u00f3n exitosa requiere que los adversarios posean conocimiento avanzado del sistema, causando bajo impacto en la Confidencialidad e Integridad. La disponibilidad del sistema no es impactada."}], "lastModified": "2026-07-23T08:10:00.137", "sourceIdentifier": "cna@sap.com"}