Medium severity4.7NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026
CVE-2022-28215
CVE-2022-28215
Description
SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information.
Affected products
6cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:750:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_abap:787:*:*:*:*:*:*:*
- (no CPE)range: 740, 750, 787
- Range: 740, 750, 787
- SAP SE/SAP NetWeaver ABAP Server and ABAP Platformv5Range: 740
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.