Unrated severityNVD Advisory· Published Jan 12, 2021· Updated Aug 3, 2024
CVE-2021-21445
CVE-2021-21445
Description
SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.
Affected products
2- Range: 1808, 1811, 1905, 2005, 2011
- SAP SE/SAP Commerce Cloudv5Range: < 1808
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.commitrex_refsource_MISC
- wiki.scn.sap.com/wiki/pages/viewpage.actionmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.