CVE-2022-41215 MEDIUM

CVE-2022-41215

Vendor Sap Se
Product SAP NetWeaver ABAP Server and ABAP Platform
Weakness CWE-601 · Open redirect
Published November 8, 2022
Last update April 30, 2025
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information.

Key dates

02Disclosure timeline

November 8, 2022 CVE published
April 30, 2025 Record updated