CVE-2023-40306

SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity.

• CWE-601
• CWE-601

• https://https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlBroken Link
• https://me.sap.com/notes/3156972Permissions Required, Vendor Advisory
• https://https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlBroken Link
• https://me.sap.com/notes/3156972Permissions Required, Vendor Advisory

Published

Sep 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4030A vulnerability was reported in BIOS for ThinkPad P14s Gen 2…7.8
• CVE-2023-40300NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.9.8
• CVE-2023-40301NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerabil…9.8
• CVE-2023-40302NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerab…9.1
• CVE-2023-40303GNU inetutils before 2.5 may allow privilege escalation beca…7.8
• CVE-2023-40305GNU indent 2.2.13 has a heap-based buffer overflow in search…5.5
• CVE-2023-40307An attacker with standard privileges on macOS when requestin…7.8
• CVE-2023-40308SAP CommonCryptoLib allows an unauthenticated attacker to cr…7.5
• CVE-2023-40309SAP CommonCryptoLib does not perform necessary authenticatio…9.8
• CVE-2023-40310SAP PowerDesigner Client - version 16.7, does not sufficient…7.5
• CVE-2023-40311Multiple stored XSS were found on different JSP files with u…4.8
• CVE-2023-40312Multiple reflected XSS were found on different JSP files wit…5.2