Description (CNA)
SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver ABAP Server and ABAP Platform | affected = 700; affected = 731; affected = 740; affected = 750; affected = 789; affected = 701; affected = 702; affected = 751; affected = 752; affected = 753; affected = 754; affected = 755; affected = 756; affected = 757; affected = 790 |
CWE
CWE-601
References
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
- https://launchpad.support.sap.com/#/notes/3251202
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.