Vulnerability Details CVE-2026-34257
Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 4.9%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2026-34257
-
cpe:2.3:a:sap:netweaver_application_server_abap:700
-
cpe:2.3:a:sap:netweaver_application_server_abap:701
-
cpe:2.3:a:sap:netweaver_application_server_abap:702
-
cpe:2.3:a:sap:netweaver_application_server_abap:731
-
cpe:2.3:a:sap:netweaver_application_server_abap:740
-
cpe:2.3:a:sap:netweaver_application_server_abap:750
-
cpe:2.3:a:sap:netweaver_application_server_abap:752
-
cpe:2.3:a:sap:netweaver_application_server_abap:753
-
cpe:2.3:a:sap:netweaver_application_server_abap:754
-
cpe:2.3:a:sap:netweaver_application_server_abap:755
-
cpe:2.3:a:sap:netweaver_application_server_abap:756
-
cpe:2.3:a:sap:netweaver_application_server_abap:757
-
cpe:2.3:a:sap:netweaver_application_server_abap:758
-
cpe:2.3:a:sap:netweaver_application_server_abap:816