CVE-2021-33707
published 2021-08-10CVE-2021-33707: SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a…
medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | netweaver_knowledge_management | — | — |
| sap | netweaver_knowledge_management | — | — |
| sap | netweaver_knowledge_management | — | — |
| sap | netweaver_knowledge_management | — | — |
| sap_se | sap_netweaver | < 7.30 | 7.30 |
| sap_se | sap_netweaver | < 7.31 | 7.31 |
| sap_se | sap_netweaver | < 7.40 | 7.40 |
| sap_se | sap_netweaver | < 7.50 | 7.50 |