cbcvebase.
CVE-2021-27604
published 2021-04-14

CVE-2021-27604: In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Enterprise Service Repository JAVA…

PriorityP434medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.79%
52.0th percentile
In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Enterprise Service Repository JAVA Mappings), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note.

Affected

12 ranges
VendorProductVersion rangeFixed in
sapnetweaver_process_integration——
sapnetweaver_process_integration——
sapnetweaver_process_integration——
sapnetweaver_process_integration——
sapnetweaver_process_integration——
sapnetweaver_process_integration——
sap_sesap_process_integration< 7.107.10
sap_sesap_process_integration< 7.207.20
sap_sesap_process_integration< 7.307.30
sap_sesap_process_integration< 7.317.31
sap_sesap_process_integration< 7.407.40
sap_sesap_process_integration< 7.507.50

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv3.07.7HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.