Medium severity6.1NVD Advisory· Published Sep 14, 2021· Updated Jun 17, 2026
CVE-2021-33674
CVE-2021-33674
Description
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability when creating a new email and to execute arbitrary code on the victim's browser.
Affected products
3700+ 1 more
- (no CPE)range: 700
- cpe:2.3:a:sap:contact_center:700:*:*:*:*:*:*:*
- SAP SE/SAP Contact Centerv5Range: < 700
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.