CVE-2021-33679: XSS
First published: Tue Sep 14 2021(Updated: )
The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject a malicious script while creating a new module document, file, or folder. When another user visits that page, the stored malicious script will execute in their session, hence allowing the attacker to compromise their confidentiality and integrity.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Businessobjects Business Intelligence Platform | =420 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-33679?
The severity of CVE-2021-33679 is medium with a severity value of 5.4.
How does CVE-2021-33679 impact SAP BusinessObjects BI Platform version 420?
CVE-2021-33679 allows an attacker with basic access to the application to inject a malicious script and execute it in another user's session.
How can I fix CVE-2021-33679 vulnerability?
To fix the CVE-2021-33679 vulnerability, apply the necessary updates or patches provided by SAP BusinessObjects BI Platform.
How can I protect my SAP BusinessObjects BI Platform version 420 from CVE-2021-33679?
To protect your SAP BusinessObjects BI Platform version 420 from CVE-2021-33679, restrict access to the application and ensure that only authenticated and authorized users have access.
What is CWE-79?
CWE-79 refers to an improper neutralization of input during web page generation vulnerability, also known as cross-site scripting (XSS).
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap businessobjects business intelligence platform
- version/sap businessobjects business intelligence platform/420