GHSA-fwjv-3fw4-7x83

GHSA-fwjv-3fw4-7x83 PUBLISHED CVSS 6.099999904632568 MEDIUM

Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.

Risk Scores

CVSS 3.1

6.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Timeline

Apr 14, 2026 CVE Published
Apr 14, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2026-34257 advisory
https://me.sap.com/notes/3692004 url
https://url.sap/sapsecuritypatchday url

Open in Interactive Console →