Riskcovery

CVE-2026-34257

Open Redirect vulnerability in SAP NetWeaver Application Server ABAP

State
Published
Severity
6.1 Medium
Published
Apr 14, 2026
Updated
Apr 14, 2026
Reserved
Mar 26, 2026

Read the record on cve.org

Description

Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.

Scores

CVSSScoreVectorSource
3.16.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Nsap

Weaknesses

  • CWE-601 URL Redirection to Untrusted Site

Affected Products

ProductVersions
SAP NetWeaver Application Server ABAPSAP_SE
  • SAP_BASIS 700Affected
  • SAP_BASIS 701Affected
  • SAP_BASIS 702Affected
  • SAP_BASIS 731Affected
  • SAP_BASIS 740Affected
  • SAP_BASIS 750Affected
  • SAP_BASIS 752Affected
  • SAP_BASIS 753Affected
  • SAP_BASIS 754Affected
  • SAP_BASIS 755Affected
  • SAP_BASIS 756Affected
  • SAP_BASIS 757Affected
  • SAP_BASIS 758Affected
  • SAP_BASIS 816Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.