CVE-2020-6215: sap se sap netweaver as abap (business server pages test application it00) Open Redirect

Vulnerability summary

CVE-2020-6215 is a medium (CVSS 6.1) Open Redirect vulnerability in sap se sap netweaver as abap (business server pages test application it00). EPSS estimates a 1.52% chance of exploitation in the next 30 days, higher than 74.3% of scored vulnerabilities.

Timeline

1. 14-04-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

• CWE-601URL Redirection to Untrusted Site ('Open Redirect')The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.