Vulnetix
Try Vulnetix Request Demo
CVE-2021-33666 PUBLISHED CVSS 4.699999809265137 MEDIUM

When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferation.

EPSS 0.15% · 35.3th percentile

Risk Scores

CVSS v3.0
4.699999809265137
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.15%
35.3th percentile

Affected Products

VendorProductVersions
sapcommerce_cloud100
SAP SESAP Commerce Cloud< 100

Timeline

References

Open in Interactive Console →