CVE-2021-21488
09.03.2021, 15:15
Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attackers code, therefore impacting Availability.Enginsight
Vendor | Product | Version |
---|---|---|
sap | netweaver_knowledge_management | 7.01 |
sap | netweaver_knowledge_management | 7.02 |
sap | netweaver_knowledge_management | 7.30 |
sap | netweaver_knowledge_management | 7.31 |
sap | netweaver_knowledge_management | 7.40 |
sap | netweaver_knowledge_management | 7.50 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration