GCVE - cpe:2.3:a:sap:contact_center:700:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:contact_center:700:*:*:*:*:*:*:*

part: a version: 700 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Contact Center (`98ed1c78-e13a-53dd-a505-e882ef5db0eb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-33675`	vulnerable	2026-06-08 05:32:12.081983	Details available MEDIUM (6.1) Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability through phishing and to execute arbitrary code on the victim's browser. Published: 2021-09-14T11:19:23.000Z Updated: 2024-08-03T23:58:22.952Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 https://launchpad.support.sap.com/#/notes/3073891	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33674`	vulnerable	2026-06-08 05:32:12.081659	Details available MEDIUM (6.5) Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability when creating a new email and to execute arbitrary code on the victim's browser. Published: 2021-09-14T11:24:33.000Z Updated: 2024-08-03T23:58:22.396Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 https://launchpad.support.sap.com/#/notes/3073891	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33673`	vulnerable	2026-06-08 05:32:12.081320	Details available HIGH (8.3) Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting (XSS) vulnerability when a user browses through the employee directory and to execute arbitrary code on the victim's browser. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands. Published: 2021-09-14T11:18:51.000Z Updated: 2024-08-03T23:58:22.552Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 https://launchpad.support.sap.com/#/notes/3073891	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33672`	vulnerable	2026-06-08 05:32:12.080877	Details available CRITICAL (9.6) Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability. Published: 2021-09-14T11:21:48.000Z Updated: 2024-08-03T23:58:22.864Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 https://launchpad.support.sap.com/#/notes/3073891	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.