SAP NetWeaver Application Server ABAP Open Redirect Vulnerability

An open redirect vulnerability has been identified in SAP NetWeaver Application Server ABAP. This vulnerability allows an unauthenticated attacker to create a malicious URL that, when accessed by a victim, can redirect them to a page controlled by the attacker. The vulnerability has a low impact on the application's confidentiality and integrity, with no effect on availability.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of users to potentially malicious sites, controlled by the attacker.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform, specifically on the SAP Security Patch Day.