SAP
SAP Fiori Launchpad Update Addresses Information Disclosure
09/21/2026
A malicious link can expose information from an authenticated SAP Fiori Launchpad session without the attacker having an account. Record SAP_UI and SAP_BASIS levels, then obtain the applicable correction and prerequisites through authorized SAP support.