4.3

CVE-2021-42067

In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible.

Data is provided by the National Vulnerability Database (NVD)
SAP ≫ Netweaver Abap Version701
SAP ≫ Netweaver Abap Version702
SAP ≫ Netweaver Abap Version711
SAP ≫ Netweaver Abap Version730
SAP ≫ Netweaver Abap Version731
SAP ≫ Netweaver Abap Version740
SAP ≫ Netweaver Abap Version750
SAP ≫ Netweaver Abap Version751
SAP ≫ Netweaver Abap Version752
SAP ≫ Netweaver Abap Version753
SAP ≫ Netweaver Abap Version754
SAP ≫ Netweaver Abap Version755
SAP ≫ Netweaver Abap Version756
SAP ≫ Netweaver Abap Version786
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.26% 0.492
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N