CVE-2021-27601
13.04.2021, 19:15
SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicious file on the server. When a victim tries to open this file, it results in a Cross-Site Scripting (XSS) vulnerability and the attacker can read and modify data. However, the attacker does not have control over kind or degree.
| Vendor | Product | Version |
|---|---|---|
| sap | netweaver_application_server_java | 7.10 |
| sap | netweaver_application_server_java | 7.11 |
| sap | netweaver_application_server_java | 7.30 |
| sap | netweaver_application_server_java | 7.31 |
| sap | netweaver_application_server_java | 7.40 |
| sap | netweaver_application_server_java | 7.50 |
𝑥
= Vulnerable software versions