CVE-2021-21489: XSS
SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This would allow an attacker with administrative privileges to store a malicious script on the portal. The execution of the script content by a victim registered on the portal could compromise the confidentiality and integrity of portal content.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21489?
CVE-2021-21489 has been rated as a high-severity vulnerability due to its potential exploitation via Stored Cross-Site Scripting.
How do I fix CVE-2021-21489?
To fix CVE-2021-21489, it is recommended to apply the latest patches provided by SAP for the affected NetWeaver Enterprise Portal versions.
Who is affected by CVE-2021-21489?
CVE-2021-21489 affects users of SAP NetWeaver Enterprise Portal versions 7.10 through 7.50.
What type of vulnerability is CVE-2021-21489?
CVE-2021-21489 is identified as a Stored Cross-Site Scripting (XSS) vulnerability.
Can CVE-2021-21489 be exploited remotely?
Yes, CVE-2021-21489 can be exploited remotely by an attacker with administrative privileges.