cbcvebase.
CVE-2021-21491
published 2021-03-10

CVE-2021-21491: SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to…

medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

Affected

16 ranges
VendorProductVersion rangeFixed in
sapnetweaver_application_server_java
sapnetweaver_application_server_java
sapnetweaver_application_server_java
sapnetweaver_application_server_java
sapnetweaver_application_server_java
sapnetweaver_application_server_java
sapnetweaver_application_server_java
sapnetweaver_application_server_java
sap_sesap_netweaver_application_server_java< 7.007.00
sap_sesap_netweaver_application_server_java< 7.107.10
sap_sesap_netweaver_application_server_java< 7.117.11
sap_sesap_netweaver_application_server_java< 7.207.20
sap_sesap_netweaver_application_server_java< 7.307.30
sap_sesap_netweaver_application_server_java< 731731
sap_sesap_netweaver_application_server_java< 7.407.40
sap_sesap_netweaver_application_server_java< 7.507.50