CVE-2021-21491: Medium severity sap netweaver as for java vulnerability
SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21491?
The severity of CVE-2021-21491 is medium.
Which versions of SAP Netweaver Application Server Java are affected by CVE-2021-21491?
Versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 of SAP Netweaver Application Server Java are affected by CVE-2021-21491.
What is the vulnerability description of CVE-2021-21491?
CVE-2021-21491 is a vulnerability in SAP Netweaver Application Server Java that allows an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
How severe is CVE-2021-21491?
CVE-2021-21491 has a severity value of 6.1.
How can I fix CVE-2021-21491?
To fix CVE-2021-21491, apply the necessary patches provided by SAP. Refer to the SAP Security Note 2976947 for more information.