Security Advisory
CVE-2013-6814
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensitive information (cookies and SAPPASSPORT) via unspecified vectors.