Medium severity6.1NVD Advisory· Published Aug 10, 2021· Updated Jun 17, 2026
CVE-2021-33707
CVE-2021-33707
Description
SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_knowledge_management:7.31:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_knowledge_management:7.40:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_knowledge_management:7.50:*:*:*:*:*:*:*
- SAP SE/SAP NetWeaver (Knowledge Management)v5Range: < 7.30
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/165748/SAP-Enterprise-Portal-Open-Redirect.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2022/Jan/73nvdMailing ListMitigationThird Party Advisory
- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
News mentions
0No linked articles in our index yet.