CVE-2023-23860
Severity CVSS v4.0:
Pending analysis
Type:
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
Publication date:
14/02/2023
Last modified:
11/04/2023
Description
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a link, which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack.<br />
<br />
Impact
Base Score 3.x
6.10
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:789:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:790:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page