Lucene search
SapCVELIST:CVE-2021-21487HistoryMar 09, 2021 - 2:11 p.m.
CVE-2021-21487
2021-03-0914:11:05
sap
www.cve.org
3
sap payment engine
privilege escalation
authorization checks
cve-2021-21487
CVSS3
6.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
AI Score
9.1
Confidence
High
EPSS
0.001
Percentile
42.8%
SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CNA Affected
[
{
"product": "SAP Payment Engine",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 500"
}
]
}
]Related
cve
cve
CVE-2021-21487
2021-03-09 15:15:15
prion
prion
Authorization
2021-03-09 15:15:00
nvd
nvd
CVE-2021-21487
2021-03-09 15:15:15
CVSS3
6.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
AI Score
9.1
Confidence
High
EPSS
0.001
Percentile
42.8%
Related for CVELIST:CVE-2021-21487