medium2026-09-22SAP Document Management System — BSP applicationsCVE-2026-0505
Open Redirect and XSS in DMS BSP Applications
SAP Document Management System
Our Take
A pair of classic web bugs in an older BSP app. Schedule with your regular ABAP updates.
Vulnerability Detail
Open redirect and cross-site scripting in the DMS BSP applications (also tracked as CVE-2026-24323). Published September 22, 2026 and covered with the October cycle.
Patch Action
Apply SAP Note 3678417. Verify affected versions in the official note.
Patch Info