Description
Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at a location not properly sanitized. When a victim clicks on this link, the script executes within the victim's browser, redirecting them to a site controlled by the attacker. This allows the attacker to access and/or modify restricted information related to the web client. While the vulnerability poses no impact on data availability, it presents a considerable risk to confidentiality and integrity.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP_SE SAP NetWeaver Application Server ABAP
Default version status: unaffected
SAP_BASIS 700affectedSAP_BASIS 701affectedSAP_BASIS 702affectedSAP_BASIS 731affectedSAP_BASIS 740affectedSAP_BASIS 750affectedSAP_BASIS 751affectedSAP_BASIS 752affectedSAP_BASIS 753affectedSAP_BASIS 754affectedSAP_BASIS 755affectedSAP_BASIS 756affectedSAP_BASIS 757affectedSAP_BASIS 758affectedSAP_BASIS 816affected