CVE-2021-40497

2021-10-1214:03:26

sap

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation could lead to exposure of some system specific data like its version.

CNA Affected

[
  {
    "product": "SAP BusinessObjects Analysis, (edition for OLAP)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 420"
      },
      {
        "status": "affected",
        "version": "< 430"
      }
    ]
  }
]