CVE-2023-0023

MEDIUM

SAP Bank Account Management - Exposure of Sensitive Information via Smart Link URL

Title source: llm
STIX 2.1

Description

In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.

References (2)

Core 2

Scores

CVSS v3 4.5
EPSS 0.0019
EPSS Percentile 41.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (2)
sap/bank_account_management 800
sap/bank_account_management 900
Published Jan 10, 2023
Tracked Since Feb 18, 2026