CVE-2021-33703: XSS
Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-33703?
CVE-2021-33703 has been assessed as a critical security vulnerability due to its potential for exploitation through Reflected Cross-Site Scripting.
How do I fix CVE-2021-33703?
To fix CVE-2021-33703, you should apply the latest patches provided by SAP for the affected NetWeaver Enterprise Portal versions.
Which products are affected by CVE-2021-33703?
CVE-2021-33703 affects SAP NetWeaver Enterprise Portal versions 7.30, 7.31, 7.40, and 7.50.
What type of vulnerability is CVE-2021-33703?
CVE-2021-33703 is classified as a Reflected Cross-Site Scripting (XSS) vulnerability.
Can CVE-2021-33703 lead to data theft?
Yes, successful exploitation of CVE-2021-33703 can allow attackers to execute malicious scripts in the context of a user's session, potentially leading to data theft.