CVE-2021-40497 PUBLISHED CVSS 5.300000190734863 MEDIUM

SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation could lead to exposure of some system specific data like its version.

EPSS 0.24% · 46.6th percentile

Risk Scores

CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.24%
46.6th percentile

Affected Products

VendorProductVersions
SAP SESAP BusinessObjects Analysis, (edition for OLAP)< 420, < 430
sapbusinessobjects_analysis420, 430

Timeline

References

Open in Interactive Console →