CVE-2021-33671

CVE-2021-33671 concerns SAP NetWeaver Guided Procedures (Administration Workset) across versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. The issue is a missing authorization check for an authenticated user, enabling privilege escalation and potential unauthorized read/modify/delete of restricted data...

CVE-2020-6187

SAP NetWeaver (Guided Procedures) is affected in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 by a vulnerability where XML input from a compromised admin is not sufficiently validated, enabling Denial of Service. The CVE entry documents the root cause as inadequate validation of XML docu...