CVE-2023-23860: 
SAP NetWeaver Application Server ABAP vulnerability analysis and mitigation

CVE-2023-23860 affects SAP NetWeaver AS for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, and 790. The vulnerability was disclosed on February 14, 2023, and allows an unauthenticated attacker to craft a link that, when clicked by an unsuspecting user, can redirect them to a malicious site (NVD).

The vulnerability is classified as an Open Redirect vulnerability (CWE-601). It has a CVSS v3.1 Base Score of 6.1 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. The scoring indicates that the vulnerability can be exploited over the network, requires low attack complexity, needs no privileges, but does require user interaction. The scope is changed, with low impacts on both confidentiality and integrity (NVD).

When exploited, this vulnerability could allow attackers to read or modify sensitive information or expose victims to phishing attacks through malicious site redirection (NVD).

SAP has released security patches for the affected versions. Users should refer to SAP Security Note 3268959 for detailed mitigation instructions (SAP Note).