EIP-2026-104418

This exploit leverages a design error in SAP BusinessObjects launch pad to perform an SSRF timing attack for port scanning. It sends a crafted request to the target URL with a specified IP and port to determine if the port is open based on response time.