Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, th…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 14, 2026 · NIST NVD

   Detected

   Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.

2. Jun 17, 2026 · NIST NVD

   Updated

   Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.

Affected

• cpe sap/netweaver application server abap700
• cpe sap/netweaver application server abap701
• cpe sap/netweaver application server abap702
• cpe sap/netweaver application server abap731
• cpe sap/netweaver application server abap740
• cpe sap/netweaver application server abap750
• cpe sap/netweaver application server abap752
• cpe sap/netweaver application server abap753

Sources

• CVE.orgVulnerability recordCVE-2026-34257

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-34257

  Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and inte

  nvd.nist.gov

References

• Permissions Required · me.sap.com
• Vendor Advisory · url.sap