CVE-2021-21487

CVE-2021-21487 affects SAP Payment Engine version 500. The root cause is missing authorization checks for an authenticated user, enabling elevation of privileges. Exploitability is network-based with authenticated access; no in-document exploitation details are provided. References indicate SAP s...