Lucene search
SapCVELIST:CVE-2021-21478HistoryFeb 09, 2021 - 8:44 p.m.
CVE-2021-21478
2021-02-0920:44:40
sap
www.cve.org
2
sap web dynpro
abap
vulnerability
reverse tabnabbing
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
36.1%
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
CNA Affected
[
{
"product": "SAP NetWeaver AS ABAP (Web Dynpro ABAP)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< SAP_UI 750"
},
{
"status": "affected",
"version": "< 752"
},
{
"status": "affected",
"version": "< 753"
},
{
"status": "affected",
"version": "< 754"
},
{
"status": "affected",
"version": "< 755"
},
{
"status": "affected",
"version": "< and SAP_BASIS 700"
},
{
"status": "affected",
"version": "< 701"
},
{
"status": "affected",
"version": "< 702"
},
{
"status": "affected",
"version": "< 731"
},
{
"status": "affected",
"version": "< 804"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2021-02-09 21:15:00
nvd
nvd
CVE-2021-21478
2021-02-09 21:15:13
cve
cve
CVE-2021-21478
2021-02-09 21:15:13
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
36.1%
Related for CVELIST:CVE-2021-21478