CVE-2021-21485
13.04.2021, 19:15
An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sap | netweaver_application_server_java | 7.10 |
| sap | netweaver_application_server_java | 7.20 |
| sap | netweaver_application_server_java | 7.30 |
| sap | netweaver_application_server_java | 7.31 |
| sap | netweaver_application_server_java | 7.40 |
| sap | netweaver_application_server_java | 7.50 |
𝑥
= Vulnerable software versions