VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 9, 2021· Updated Jun 17, 2026

CVE-2021-21481

CVE-2021-21481

Description

The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including such that grant administrative privileges. This could result in complete compromise of system confidentiality, integrity, and availability.

Affected products

9
  • SAP/Netweaver8 versions
    cpe:2.3:a:sap:netweaver:7.10:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sap:netweaver:7.10:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.11:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*
    • (no CPE)range: 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50
  • SAP SE/SAP NetWeaver AS JAVA (MigrationService)v5
    Range: < 7.10

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.