CVEvulnerability

CVE-2020-6215

6.1 MEDIUM Published 2020-04-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

Affected configurations

• sap netweaver as abap business server pages 700 • sap netweaver as abap business server pages 701 • sap netweaver as abap business server pages 702 • sap netweaver as abap business server pages 730 • sap netweaver as abap business server pages 731 • sap netweaver as abap business server pages 740 • sap netweaver as abap business server pages 750 • sap netweaver as abap business server pages 751 • sap netweaver as abap business server pages 752 • sap netweaver as abap business server pages 753 • sap netweaver as abap business server pages 754

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References