description: SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
problem types: Tabnabbing
affected:
{
product: SAP NetWeaver AS ABAP (Web Dynpro ABAP)
vendor: SAP SE
versions:
status: affected, version: < SAP_UI 750
status: affected, version: < 752
status: affected, version: < 753
status: affected, version: < 754
status: affected, version: < 755
status: affected, version: < and SAP_BASIS 700
status: affected, version: < 701
status: affected, version: < 702
status: affected, version: < 731
status: affected, version: < 804
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
version: 3.0
]