Biller Direct (Sap) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-12-12. Vendor: Sap.

CVEs of Biller Direct

• CVE-2023-42479 - CVSS 6.1 (medium), 2023-12-12: An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting…
• CVE-2022-41207 - CVSS 6.1 (medium), 2022-11-08: SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized…