CVE-2021-33689 PUBLISHED CVSS 3.5 LOW

When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security audit log is created. Therefore, security audit log Integrity is impacted.

EPSS 0.23% · 45.7th percentile

Risk Scores

CVSS v3.0
3.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS Score
0.23%
45.7th percentile

Affected Products

VendorProductVersions
sapnetweaver_application_server_java7.50
SAP SESAP NetWeaver AS JAVA (Administrator applications)< 7.50

Timeline

References

Open in Interactive Console →