Lucene search
SapCVELIST:CVE-2021-21476HistoryFeb 09, 2021 - 8:44 p.m.
CVE-2021-21476
2021-02-0920:44:32
sap
www.cve.org
2
sap ui5
reverse tabnabbing
vulnerability
redirect
unauthenticated
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
38.6%
SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
CNA Affected
[
{
"product": "SAP UI5",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 1.38.49"
},
{
"status": "affected",
"version": "< 1.52.49"
},
{
"status": "affected",
"version": "< 1.60.34"
},
{
"status": "affected",
"version": "< 1.71.31"
},
{
"status": "affected",
"version": "< 1.78.18"
},
{
"status": "affected",
"version": "< 1.84.5"
},
{
"status": "affected",
"version": "< 1.85.4"
},
{
"status": "affected",
"version": "< 1.86.1"
}
]
}
]Related
nvd
nvd
CVE-2021-21476
2021-02-09 21:15:13
cve
cve
CVE-2021-21476
2021-02-09 21:15:13
prion
prion
Design/Logic Flaw
2021-02-09 21:15:00
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
38.6%
Related for CVELIST:CVE-2021-21476