CVE-2020-6215

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

• CWE-601

• http://packetstormsecurity.com/files/174985/SAP-Application-Server-ABAP-Open-Redirection.html
• http://seclists.org/fulldisclosure/2023/Oct/13
• https://launchpad.support.sap.com/#/notes/2872782Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202Vendor Advisory
• http://packetstormsecurity.com/files/174985/SAP-Application-Server-ABAP-Open-Redirection.html
• http://seclists.org/fulldisclosure/2023/Oct/13
• https://launchpad.support.sap.com/#/notes/2872782Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202Vendor Advisory

Published

Apr 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6209SAP Disclosure Management, version 10.1, does not perform ne…7.5
• CVE-2020-6210SAP Fiori Launchpad, versions- 753, 754, does not sufficient…6.1
• CVE-2020-6211SAP Business Objects Business Intelligence Platform (AdminTo…6.1
• CVE-2020-6212Egypt localized withholding tax reports Clearing of Liabilit…5.4
• CVE-2020-6213SAP NetWeaver AS ABAP Business Server Pages Test Application…6.1
• CVE-2020-6214SAP S/4HANA (Financial Products Subledger), version 100, use…4.7
• CVE-2020-6216SAP Business Objects Business Intelligence Platform (BI Laun…6.1
• CVE-2020-6217SAP NetWeaver AS ABAP Business Server Pages Test Application…6.1
• CVE-2020-6218Admin tools and Query Builder in SAP Business Objects Busine…5
• CVE-2020-6219SAP Business Objects Business Intelligence Platform (Crystal…8.8
• CVE-2020-6220BI Launchpad and CMC in SAP Business Objects Business Intell…4.7
• CVE-2020-6221Web Intelligence HTML interface in SAP Business Objects Busi…5.4