cbcvebase.
CVE-2021-42067
published 2022-01-14

CVE-2021-42067: In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a…

PriorityP420medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.63%
46.1th percentile
In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible.

Affected

42 ranges· showing 25
VendorProductVersion rangeFixed in
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——

CVSS provenance

nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.