Lucene search
SapCVELIST:CVE-2021-33697HistorySep 15, 2021 - 6:01 p.m.
CVE-2021-33697
2021-09-1518:01:46
CWE-1022
sap
www.cve.org
4
sap
businessobjects
bi platform
reverse tabnabbing
vulnerability
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
38.6%
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
CNA Affected
[
{
"product": "SAP BusinessObjects Business Intelligence Platform (SAPUI5)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 420"
},
{
"status": "affected",
"version": "< 430"
}
]
}
]Related
cve
cve
CVE-2021-33697
2021-09-15 19:15:09
nvd
nvd
CVE-2021-33697
2021-09-15 19:15:09
prion
prion
Design/Logic Flaw
2021-09-15 19:15:00
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
38.6%
Related for CVELIST:CVE-2021-33697