CVE-2021-33666

published 2021-06-09

CVE-2021-33666: When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferation.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	commerce_cloud	—	—
sap_se	sap_commerce_cloud	< 100	100

CWE-79