CVE-2021-42063

2021-12-1415:44:11

sap

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%

JSON

A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data.

CNA Affected

[
  {
    "product": "SAP Knowledge Warehouse",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 7.30"
      },
      {
        "status": "affected",
        "version": "< 7.31"
      },
      {
        "status": "affected",
        "version": "< 7.40"
      },
      {
        "status": "affected",
        "version": "< 7.50"
      }
    ]
  }
]