VYPR
← All advisories
High severity7.2NVD Advisory· Published Jul 14, 2021· Updated Jun 17, 2026

CVE-2021-33676

CVE-2021-33676

Description

A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.

Affected products

8
  • SAP SE/SAP CRMv5
    Range: < 700
  • SAP/CRMllm-fuzzy
    Range: 700, 701, 702, 712, 713, 714
  • SAP/Customer Relationship Management6 versions
    cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:712:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:713:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:714:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.