CVE-2017-16679: SAP Kernel

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site.

Affected products

• SAP SAP Kernel: version 7.21 only; version 7.21ext only; version 7.22 only; version 7.22ext only; version 7.45 only; version 7.49 only; …

Published 2017-12-12. Last modified 2026-06-17.