Unrated severityNVD Advisory· Published Apr 14, 2020· Updated Aug 4, 2024

CVE-2020-6215

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/NetWeaver AS ABAP Business Server Pages Test Application IT00llm-create
Range: 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754
SAP SE/SAP NetWeaver AS ABAP (Business Server Pages Test Application IT00)v5
Range: < 700

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2023/Oct/13mitremailing-list
packetstormsecurity.com/files/174985/SAP-Application-Server-ABAP-Open-Redirection.htmlmitre
launchpad.support.sap.commitre
wiki.scn.sap.com/wiki/pages/viewpage.actionmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000