CVE-2021-33677 - Vulnerability Details

Vendors	Products
Sap	Netweaver Abap Netweaver Application Server Abap

Link	Providers
https://launchpad.support.sap.com/#/notes/3044754
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "SAP NetWeaver AS ABAP and ABAP Platform", "vendor": "SAP SE", "versions": [{"status": "affected", "version": "< 700"}, {"status": "affected", "version": "< 702"}, {"status": "affected", "version": "< 730"}, {"status": "affected", "version": "< 731"}, {"status": "affected", "version": "< 804"}, {"status": "affected", "version": "< 740"}, {"status": "affected", "version": "< 750"}, {"status": "affected", "version": "< 784"}, {"status": "affected", "version": "< DEV"}]}], "descriptions": [{"lang": "en", "value": "SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Information Disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-07-14T11:03:57", "orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506"}, {"tags": ["x_refsource_MISC"], "url": "https://launchpad.support.sap.com/#/notes/3044754"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cna@sap.com", "ID": "CVE-2021-33677", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "SAP NetWeaver AS ABAP and ABAP Platform", "version": {"version_data": [{"version_name": "<", "version_value": "700"}, {"version_name": "<", "version_value": "702"}, {"version_name": "<", "version_value": "730"}, {"version_name": "<", "version_value": "731"}, {"version_name": "<", "version_value": "804"}, {"version_name": "<", "version_value": "740"}, {"version_name": "<", "version_value": "750"}, {"version_name": "<", "version_value": "784"}, {"version_name": "<", "version_value": "DEV"}]}}]}, "vendor_name": "SAP SE"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure."}]}, "impact": {"cvss": {"baseScore": "6.5", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Information Disclosure"}]}]}, "references": {"reference_data": [{"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506", "refsource": "MISC", "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506"}, {"name": "https://launchpad.support.sap.com/#/notes/3044754", "refsource": "MISC", "url": "https://launchpad.support.sap.com/#/notes/3044754"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:58:22.565Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://launchpad.support.sap.com/#/notes/3044754"}]}]}, "cveMetadata": {"assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "assignerShortName": "sap", "cveId": "CVE-2021-33677", "datePublished": "2021-07-14T11:03:57", "dateReserved": "2021-05-28T00:00:00", "dateUpdated": "2024-08-03T23:58:22.565Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : SAP NetWeaver AS ABAP and ABAP Platform (string)

vendor : SAP SE (string)

versions : [ »

0 : { »

status : affected (string)

version : < 700 (string)

}

1 : { »

status : affected (string)

version : < 702 (string)

}

2 : { »

status : affected (string)

version : < 730 (string)

}

3 : { »

status : affected (string)

version : < 731 (string)

}

4 : { »

status : affected (string)

version : < 804 (string)

}

5 : { »

status : affected (string)

version : < 740 (string)

}

6 : { »

status : affected (string)

version : < 750 (string)

}

7 : { »

status : affected (string)

version : < 784 (string)

}

8 : { »

status : affected (string)

version : < DEV (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Information Disclosure (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-07-14T11:03:57 (string)

orgId : e4686d1a-f260-4930-ac4c-2f5c992778dd (string)

shortName : sap (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://launchpad.support.sap.com/#/notes/3044754 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cna@sap.com (string)

ID : CVE-2021-33677 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : SAP NetWeaver AS ABAP and ABAP Platform (string)

version : { »

version_data : [ »

0 : { »

version_name : < (string)

version_value : 700 (string)

}

1 : { »

version_name : < (string)

version_value : 702 (string)

}

2 : { »

version_name : < (string)

version_value : 730 (string)

}

3 : { »

version_name : < (string)

version_value : 731 (string)

}

4 : { »

version_name : < (string)

version_value : 804 (string)

}

5 : { »

version_name : < (string)

version_value : 740 (string)

}

6 : { »

version_name : < (string)

version_value : 750 (string)

}

7 : { »

version_name : < (string)

version_value : 784 (string)

}

8 : { »

version_name : < (string)

version_value : DEV (string)

}

]

}

]

}

vendor_name : SAP SE (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure. (string)

}

]

}

impact : { »

cvss : { »

baseScore : 6.5 (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L (string)

version : 3.0 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Information Disclosure (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 (string)

refsource : MISC (string)

url : https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 (string)

}

1 : { »

name : https://launchpad.support.sap.com/#/notes/3044754 (string)

refsource : MISC (string)

url : https://launchpad.support.sap.com/#/notes/3044754 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T23:58:22.565Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://launchpad.support.sap.com/#/notes/3044754 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : e4686d1a-f260-4930-ac4c-2f5c992778dd (string)

assignerShortName : sap (string)

cveId : CVE-2021-33677 (string)

datePublished : 2021-07-14T11:03:57 (string)

dateReserved : 2021-05-28T00:00:00 (string)

dateUpdated : 2024-08-03T23:58:22.565Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sap:netweaver_abap:700:*:*:*:*:*:*:*", "matchCriteriaId": "E0DA7CC6-A0F6-4839-965D-C60F691496AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_abap:702:*:*:*:*:*:*:*", "matchCriteriaId": "FFC58754-3A9D-4320-AB4F-385FB72608E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_abap:730:*:*:*:*:*:*:*", "matchCriteriaId": "6D46B6A9-C9F3-4270-AA6D-9988D6D4E608", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_abap:731:*:*:*:*:*:*:*", "matchCriteriaId": "5B8A73A5-4526-40E1-A540-0A6C3F93DA05", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*", "matchCriteriaId": "09A38B6E-03DC-4086-A307-542B35814E0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_abap:750:*:*:*:*:*:*:*", "matchCriteriaId": "4651257F-7BFC-41AE-8E37-8C96F822CE58", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_abap:784:*:*:*:*:*:*:*", "matchCriteriaId": "0F9CF5F7-EA03-41C4-9BF9-F3FC28F4EE9F", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_abap:804:*:*:*:*:*:*:*", "matchCriteriaId": "5EFD3BCC-9B3E-49F2-B469-C465381303B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*", "matchCriteriaId": "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*", "matchCriteriaId": "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:*:*:*:*", "matchCriteriaId": "2F1B47E4-C4E3-4D79-9048-EF6A82B8085E", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*", "matchCriteriaId": "5CC29738-CF17-4E6B-9C9E-879B17F7E001", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*", "matchCriteriaId": "127E508F-6CC1-41C8-96DF-8D14FFDD4020", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*", "matchCriteriaId": "7777AA80-1608-420E-B7D5-09ABECD51728", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:784:*:*:*:*:*:*:*", "matchCriteriaId": "E968B8C6-B6A4-4BCC-9233-E6AA7D354709", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:804:*:*:*:*:*:*:*", "matchCriteriaId": "2132C1C0-AD61-4C85-BA07-523206815A4D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure."}, {"lang": "es", "value": "El servidor ABAP de SAP NetWeaver y la Plataforma ABAP, versiones - 700, 702, 730, 731, 804, 740, 750, 784, expone funciones al exterior que pueden conllevar a una divulgaci\u00f3n de informaci\u00f3n"}], "id": "CVE-2021-33677", "lastModified": "2024-11-21T06:09:20.617", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "cna@sap.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-07-14T12:15:08.340", "references": [{"source": "cna@sap.com", "tags": ["Permissions Required"], "url": "https://launchpad.support.sap.com/#/notes/3044754"}, {"source": "cna@sap.com", "tags": ["Vendor Advisory"], "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "https://launchpad.support.sap.com/#/notes/3044754"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506"}], "sourceIdentifier": "cna@sap.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:700:*:*:*:*:*:*:* (string)

matchCriteriaId : E0DA7CC6-A0F6-4839-965D-C60F691496AD (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:702:*:*:*:*:*:*:* (string)

matchCriteriaId : FFC58754-3A9D-4320-AB4F-385FB72608E7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:730:*:*:*:*:*:*:* (string)

matchCriteriaId : 6D46B6A9-C9F3-4270-AA6D-9988D6D4E608 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:731:*:*:*:*:*:*:* (string)

matchCriteriaId : 5B8A73A5-4526-40E1-A540-0A6C3F93DA05 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:* (string)

matchCriteriaId : 09A38B6E-03DC-4086-A307-542B35814E0E (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:750:*:*:*:*:*:*:* (string)

matchCriteriaId : 4651257F-7BFC-41AE-8E37-8C96F822CE58 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:784:*:*:*:*:*:*:* (string)

matchCriteriaId : 0F9CF5F7-EA03-41C4-9BF9-F3FC28F4EE9F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:sap:netweaver_abap:804:*:*:*:*:*:*:* (string)

matchCriteriaId : 5EFD3BCC-9B3E-49F2-B469-C465381303B4 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:* (string)

matchCriteriaId : C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:* (string)

matchCriteriaId : 706FEB9E-3EE9-405E-A8C9-733DAF68AC6D (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:*:*:*:* (string)

matchCriteriaId : 2F1B47E4-C4E3-4D79-9048-EF6A82B8085E (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:* (string)

matchCriteriaId : 5CC29738-CF17-4E6B-9C9E-879B17F7E001 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:* (string)

matchCriteriaId : 127E508F-6CC1-41C8-96DF-8D14FFDD4020 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:* (string)

matchCriteriaId : 7777AA80-1608-420E-B7D5-09ABECD51728 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:784:*:*:*:*:*:*:* (string)

matchCriteriaId : E968B8C6-B6A4-4BCC-9233-E6AA7D354709 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:sap:netweaver_application_server_abap:804:*:*:*:*:*:*:* (string)

matchCriteriaId : 2132C1C0-AD61-4C85-BA07-523206815A4D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure. (string)

}

1 : { »

lang : es (string)

value : El servidor ABAP de SAP NetWeaver y la Plataforma ABAP, versiones - 700, 702, 730, 731, 804, 740, 750, 784, expone funciones al exterior que pueden conllevar a una divulgación de información (string)

}

]

id : CVE-2021-33677 (string)

lastModified : 2024-11-21T06:09:20.617 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 2.5 (number)

source : cna@sap.com (string)

type : Secondary (string)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-07-14T12:15:08.340 (string)

references : [ »

0 : { »

source : cna@sap.com (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://launchpad.support.sap.com/#/notes/3044754 (string)

}

1 : { »

source : cna@sap.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://launchpad.support.sap.com/#/notes/3044754 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 (string)

}

]

sourceIdentifier : cna@sap.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-Other (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object