Open Redirect CVE-2026-34257

The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C) indicates network-accessible, low-complexity exploitation requiring no privileges but mandatory user interaction (clicking a malicious link). The 6.1 score reflects low confidentiality and integrity impact without availability impact, typical of open redirect flaws. While EPSS exploitation probability data was not provided, open redirects are frequently exploited in real-world phishing campaigns but typically require social engineering to succeed. The risk is amplified in SAP environments because: (1) SAP applications handle sensitive financial and operational data, (2) legitimate SAP URLs are trusted by users, making phishing more effective, and (3) attackers can use crafted URLs to capture NetWeaver credentials. However, this is not a remote code execution or direct authentication bypass-it requires active victim participation and is primarily a trust/confidence attack rather than a technical control escape. Real-world priority should be moderate to moderately-high depending on user population exposure and internal phishing awareness levels.

An attacker crafts a URL like 'https://legitimate-sap-server.company.com/path?redirect=https://evil.attacker.com/fake-login' and includes it in a phishing email claiming to be from the company's SAP administrator. When a user clicks the link, they see the legitimate SAP domain in the address bar initially, gaining trust, then are silently redirected to the attacker's fake login page which captures their NetWeaver credentials. The attacker then uses the stolen credentials to access the actual SAP system. No public exploit code is required-simple URL crafting and HTML email are sufficient.