← Database

CVE-2022-28215

MEDIUM CVSS: 4.7 Published: 2022-04-12 Modified: 2026-06-17

Description

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information.

Affected Platforms

Sap Netweaver Abap

Weakness Type

CWE-601

References