CVE-2023-0023: SAP Bank Account Management

Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days.

In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.

Affected products

• SAP Bank Account Management: version 800 only; version 900 only

Published 2023-01-10. Last modified 2026-06-17.