CVE-2021-42063

2021-12-1415:44:11

sap

www.cve.org

sap

knowledge warehouse

xss attacks

web browser

sensitive data disclosure

AI Score

6.3

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data.

CNA Affected

[
  {
    "product": "SAP Knowledge Warehouse",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 7.30"
      },
      {
        "status": "affected",
        "version": "< 7.31"
      },
      {
        "status": "affected",
        "version": "< 7.40"
      },
      {
        "status": "affected",
        "version": "< 7.50"
      }
    ]
  }
]