Medium severity6.5NVD Advisory· Published Apr 13, 2021· Updated Jun 17, 2026
CVE-2021-27609
CVE-2021-27609
Description
SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.
Affected products
4cpe:2.3:a:sap:focused_run:200:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:focused_run:200:*:*:*:*:*:*:*
- cpe:2.3:a:sap:focused_run:300:*:*:*:*:*:*:*
- (no CPE)range: 200, 300
- SAP SE/SAP Focused RUNv5Range: < 200
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.