CVE-2021-27612
First published: Tue May 11 2021(Updated: )
In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP GUI | =7.60 | |
| SAP GUI | =7.60-patch_level1 | |
| SAP GUI | =7.60-patch_level2 | |
| SAP GUI | =7.60-patch_level3 | |
| SAP GUI | =7.60-patch_level4 | |
| SAP GUI | =7.60-patch_level5 | |
| SAP GUI | =7.60-patch_level6 | |
| SAP GUI | =7.60-patch_level7 | |
| SAP GUI | =7.60-patch_level8 | |
| SAP GUI | =7.60-patch_level8_hotfix1 | |
| SAP GUI | =7.60-patch_level9 | |
| SAP GUI | =7.70 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-27612?
CVE-2021-27612 is considered a high-severity vulnerability due to its potential for leading users to malicious websites.
How do I fix CVE-2021-27612?
To fix CVE-2021-27612, update SAP GUI for Windows to version 7.60 PL10 or 7.70 PL1 or later.
What versions of SAP GUI for Windows are affected by CVE-2021-27612?
CVE-2021-27612 affects SAP GUI for Windows versions up to and including 7.60 PL9 and 7.70 PL0.
What type of attacks can CVE-2021-27612 enable?
CVE-2021-27612 can enable phishing attacks or delivery of malware by redirecting users to malicious websites.
Is there a workaround for CVE-2021-27612?
There are no recommended workarounds for CVE-2021-27612; users should upgrade to the latest versions.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap gui
- version/sap gui/7.60
- version/sap gui/7.60-patch_level1
- version/sap gui/7.60-patch_level2
- version/sap gui/7.60-patch_level3
- version/sap gui/7.60-patch_level4
- version/sap gui/7.60-patch_level5
- version/sap gui/7.60-patch_level6
- version/sap gui/7.60-patch_level7
- version/sap gui/7.60-patch_level8
- version/sap gui/7.60-patch_level8_hotfix1
- version/sap gui/7.60-patch_level9
- version/sap gui/7.70