{"cve":{"cve_id":"CVE-2023-0023","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00507,"epss_percentile":0.39222,"epss_as_of":"2026-06-23","description":"In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.","published_at":"2023-01-10T03:32:49.846000Z","last_modified_at":null,"cvss_v3_score":4.5,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":false,"ssvc_technical_impact":"partial","cwes":["CWE-200"],"nvd_references":["https://launchpad.support.sap.com/#/notes/3150704","https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-29T01:23:15.370465Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"H","value_label":"High"},{"metric":"UI","name":"User Interaction","value":"R","value_label":"Required"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"sap","vendor_name":"SAP","product_slug":"bank-account-management-manage-banks","product_name":"Bank Account Management (Manage Banks)","version_start":"800","version_start_inclusive":true,"version_end":"800","version_end_inclusive":true,"cpe23_uri":"cve5:sap:bank-account-management-manage-banks:800:800"},{"vendor_slug":"sap","vendor_name":"SAP","product_slug":"bank-account-management-manage-banks","product_name":"Bank Account Management (Manage Banks)","version_start":"900","version_start_inclusive":true,"version_end":"900","version_end_inclusive":true,"cpe23_uri":"cve5:sap:bank-account-management-manage-banks:900:900"}],"exploit_refs":[],"news":[],"references":[{"url":"https://launchpad.support.sap.com/#/notes/3150704","source_type":"MISC","tags":[]},{"url":"https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2023-01-10T03:32:49.846000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:25:33.319521Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:25:33.319521Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:25:33.319521Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"ssvc_changed","at":"2026-06-29T01:23:15.370465Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:23:15.370465Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:23:15.370465Z","label":"SSVC decision revised","source":"vulnrichment"}]}