VDB

CVE-2021-33687

CVE-2021-33687 PUBLISHED CVSS 4.5 MEDIUM

SAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information in one of their HTTP requests, an attacker can use this in conjunction with other attacks such as XSS to steal this information.

EPSS 0.72% · 72.9th percentile

Risk Scores

CVSS 3.0
4.5
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.72%
72.9th percentile

Affected Products

VendorProductVersions
sapnetweaver_application_server_java7.50, 7.10, 7.20
SAP SESAP NetWeaver AS JAVA (Enterprise Portal)< 7.30, < 7.31, < 7.40

Timeline

  • Jul 14, 2021 CVE Published
  • Jul 15, 2021 EPSS Score
  • Sep 13, 2021 EPSS Score
  • Nov 11, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 10, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 9, 2022 EPSS Score
  • Jul 8, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Nov 5, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›