CVE-2026-40137
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
May 12, 2026
Vendor
unknown
Description
SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker?controlled sites, potentially exposing or altering sensitive information in the victimοΏ½s browser. This results in a low impact on confidentiality and integrity, with no impact on the availability of the application.