CVE-2021-21478

MEDIUM

SAP Web Dynpro ABAP - Open Redirect via Reverse Tabnabbing

Title source: llm

SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

Core 2

Core References

Vendor Advisory x_refsource_misc

Permissions Required x_refsource_misc

CVSS v3 6.1

EPSS 0.0017

EPSS Percentile 37.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-601

Status published

Products (1)

sap/web_dynpro_abap

Published Feb 09, 2021

Tracked Since Feb 18, 2026