VULNERABILITY INTELLIGENCE

CVE-2021-37535

CVSS score10 CRITICAL

EPSS probability1.09%

CISA KEVNot currently listed

Published2021-09-14

Last modified2026-06-17

Description

SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.