PT-2026-32567 · Sap Se · Sap Netweaver Application Server Abap

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-34257

NVD

CVSS v3.1

6.1

Medium

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-34257

Affected Products

Sap Netweaver Application Server Abap

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-34257 · Security Note
• https://me.sap.com/notes/3692004 · Note
• https://twitter.com/VulmonFeeds/status/2044006062752166130 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/2043976158425797066 · Twitter Post
• https://twitter.com/CVEarity/status/2044076069058425098 · Twitter Post