Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-27621 EUVD-2021-14368GHSA-2rpq-3585-p54f

Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,…

Published Jun 9, 2021 · Updated Aug 3, 2024 · Assigned by sap

Description

Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows attackers to access restricted information by entering malicious server name.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS for Java (UserAdmin) < 7.11, < 7.20, < 7.30, < 7.31, < 7.40, < 7.50 —

References