VDB
CVE-2021-33665
CVE-2021-33665
PUBLISHED
CVSS 5.400000095367432 MEDIUM
SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL - 7.49,7.53,7.77,7.81,7.84, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
EPSS 0.24% · 47.0th percentile
Risk Scores
CVSS 3.0
5.400000095367432
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.24%
47.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) | < 7.53, < KERNEL - 7.49, < 7.77 |
| sap | netweaver_application_server_abap | kernel_7.49, kernel_7.53, kernel_7.77 |
Exploit Intelligence
Timeline
- Jun 8, 2021 CVE Published
- Jun 10, 2021 EPSS Score
- Jun 19, 2021 EPSS Score
- Jun 24, 2021 EPSS Score
- Oct 11, 2021 EPSS Score
- Dec 10, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 9, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 11, 2022 EPSS Score
- Aug 12, 2022 EPSS Score
- Oct 11, 2022 EPSS Score