Orta CVSS 6.1
CVE-2026-34257: Netweaver Application Server Abap: açık yönlendirme
Açıklama (NVD)
Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.
Özet bilgiler
- Ürün
- Sap Netweaver Application Server Abap
- CVSS v3.1
- 6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS
- %0,16 (yüzdelik 5)
- CWE
- CWE-601
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sap-netweaver-application-server-abap | 700 | 700 | — |
| sap-netweaver-application-server-abap | 701 | 701 | — |
| sap-netweaver-application-server-abap | 702 | 702 | — |
| sap-netweaver-application-server-abap | 731 | 731 | — |
| sap-netweaver-application-server-abap | 740 | 740 | — |
| sap-netweaver-application-server-abap | 750 | 750 | — |
| sap-netweaver-application-server-abap | 752 | 752 | — |
| sap-netweaver-application-server-abap | 753 | 753 | — |
| sap-netweaver-application-server-abap | 754 | 754 | — |
| sap-netweaver-application-server-abap | 755 | 755 | — |
| sap-netweaver-application-server-abap | 756 | 756 | — |
| sap-netweaver-application-server-abap | 757 | 757 | — |
| sap-netweaver-application-server-abap | 758 | 758 | — |
| sap-netweaver-application-server-abap | 816 | 816 | — |