VDB
CVE-2021-33676
CVE-2021-33676
PUBLISHED
CVSS 6.800000190734863 MEDIUM
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.
EPSS 0.24% · 47.0th percentile
Risk Scores
CVSS 3.0
6.800000190734863
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.24%
47.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP CRM | *, < 701, < 702 |
| sap | customer_relationship_management | 701, 702, 712 |
Exploit Intelligence
Timeline
- Jul 14, 2021 CVE Published
- Jul 15, 2021 EPSS Score
- Sep 13, 2021 EPSS Score
- Nov 11, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 10, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 9, 2022 EPSS Score
- Jul 8, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Nov 5, 2022 EPSS Score