VULNERABILITY INTELLIGENCE

CVE-2021-21481

CVSS score8.8 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2021-03-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including such that grant administrative privileges. This could result in complete compromise of system confidentiality, integrity, and availability.

Weakness classification

  • nvd@nist.gov: CWE-863

Primary references