CVE-2026-34257CWE-601

Open Redirect vulnerability in SAP NetWeaver Application Server ABAP

Medium · published April 14, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-04-14T00:08Z
EPSS history
Timeline
  • 14 APR 00:08Z
    Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
    cvelistv5