Lucene search
SapCVELIST:CVE-2021-33675HistorySep 14, 2021 - 11:19 a.m.
CVE-2021-33675
2021-09-1411:19:23
sap
www.cve.org
6
sap
contact center
version 700
xss
vulnerability
phishing
execute arbitrary code
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
40.8%
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability through phishing and to execute arbitrary code on the victim’s browser.
CNA Affected
[
{
"product": "SAP Contact Center",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 700"
}
]
}
]Related
cnvd
cnvd
SAP Contact Center Cross-Site Scripting Vulnerability (CNVD-2023-00364)
2021-09-17 00:00:00
prion
prion
Cross site scripting
2021-09-14 12:15:00
cve
cve
CVE-2021-33675
2021-09-14 12:15:09
nvd
nvd
CVE-2021-33675
2021-09-14 12:15:09
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
40.8%
Related for CVELIST:CVE-2021-33675