CVE-2020-6215: SAP NetWeaver As Abap Business Server Pages

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

Affected products

• SAP NetWeaver As Abap Business Server Pages: version 700 only; version 701 only; version 702 only; version 730 only; version 731 only; version 740 only; …

Published 2020-04-14. Last modified 2026-06-17.