Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_as_for_java_(applications_based_on_htmlb_for_java):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver As For Java (Applications Based On Htmlb For Java) (0a9f4dc8-2e13-592b-961d-095d0cad9240)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27601 vulnerable 2026-06-08 05:31:21.845727 Details available
MEDIUM (5.4)
SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicious file on the server. When a victim tries to open this file, it results in a Cross-Site Scripting (XSS) vulnerability and the attacker can read and modify data. However, the attacker does not have control over kind or degree.
Published: 2021-04-13T18:43:53.000Z
Updated: 2024-08-03T21:26:10.336Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.