CVE-2023-0023

Information Disclosure in SAP Bank Account Management (Manage Banks)

State: Published
Severity: 4.5 Medium
Published: Jan 10, 2023
Updated: Apr 9, 2025
Reserved: Dec 22, 2022

Description

In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.

Scores

CVSS	Score	Vector	Source
3.1	4.5 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N	sap

Weaknesses

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Product	Versions
Bank Account Management (Manage Banks)SAP	800Affected 900Affected

References

https://launchpad.support.sap.com/#/notes/3150704
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.