VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 9, 2021· Updated Jun 17, 2026

CVE-2021-21476

CVE-2021-21476

Description

SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

Affected products

3
  • SAP/UI52 versions
    cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*range: <1.38.49
    • (no CPE)range: <1.38.49, <1.52.49, <1.60.34, <1.71.31, <1.78.18, <1.84.5, <1.85.4, <1.86.1
  • SAP SE/SAP UI5v5
    Range: < 1.38.49

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.