Medium severity4.8NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026
CVE-2021-33694
CVE-2021-33694
Description
SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting.
Affected products
3cpe:2.3:a:sap:cloud_connector:2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:cloud_connector:2.0:*:*:*:*:*:*:*
- (no CPE)range: =2.0
- SAP SE/SAP Cloud Connectorv5Range: < 2.0
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdPatchVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.