An unauthorized attacker may exploit SAP NetWeaver Application Server for Java to gain NTLM hashes of a privileged user
Reporter | Title | Published | Views | Family All 5 |
---|---|---|---|---|
![]() | CVE-2021-21485 | 13 Apr 202118:44 | – | cvelist |
![]() | Code injection | 13 Apr 202119:15 | – | prion |
![]() | SAP NetWeaver Application Server for Java Information Disclosure Vulnerability | 16 Apr 202100:00 | – | cnvd |
![]() | CVE-2021-21485 | 13 Apr 202119:15 | – | nvd |
![]() | SAP NetWeaver AS Java and AS ABAP Multiple Vulnerabilities (Apr 2021) | 15 Apr 202100:00 | – | nessus |
[
{
"product": "SAP NetWeaver AS for JAVA (Telnet Commands)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "ENGINEAPI 7.30, 7.31, 7.40, 7.50"
},
{
"status": "affected",
"version": "ESP_FRAMEWORK 7.10, 7.20, 7.30, 7.31, 7.40, 7.50"
},
{
"status": "affected",
"version": "SERVERCORE 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50"
},
{
"status": "affected",
"version": "J2EE-FRMW 7.10, 7.20, 7.30, 7.31, 7.40, 7.50"
}
]
}
]
Source | Link |
---|---|
wiki | www.wiki.scn.sap.com/wiki/pages/viewpage.action |
launchpad | www.launchpad.support.sap.com/ |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo