CVE-2021-33665

Published: Jun 9, 2021Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL - 7.49,7.53,7.77,7.81,7.84, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected (8)

Products: Sap: Netweaver Application Server Abap

Sap

1 product

Netweaver Application Server Abap

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Application Server Abap	Version kernel_7.49
Sap Netweaver Application Server Abap	Version kernel_7.53
Sap Netweaver Application Server Abap	Version kernel_7.77
Sap Netweaver Application Server Abap	Version kernel_7.81
Sap Netweaver Application Server Abap	Version kernel_7.84
Sap Netweaver Application Server Abap	Version krnl64nuc_7.49
Sap Netweaver Application Server Abap	Version krnl64uc_7.49
Sap Netweaver Application Server Abap	Version krnl64uc_7.53