Sap Biller Direct (Sap Se) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-12-12. Vendor: Sap Se.

CVEs of Sap Biller Direct

• CVE-2023-42479 - CVSS 6.1 (medium), 2023-12-12: An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting…
• CVE-2022-41207 - CVSS 6.1 (medium), 2022-11-08: SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized…