VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Nov 10, 2021· Updated Jun 17, 2026

CVE-2021-42062

CVE-2021-42062

Description

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.

Affected products

5
  • SAP/ERP HCM Portugalllm-fuzzy
  • SAP SE/SAP ERP HCM Portugalv5
    Range: < 600
  • SAP/ERP Human Capital Management3 versions
    cpe:2.3:a:sap:erp_human_capital_management:600:*:*:*:portugal:*:*:*+ 2 more
    • cpe:2.3:a:sap:erp_human_capital_management:600:*:*:*:portugal:*:*:*
    • cpe:2.3:a:sap:erp_human_capital_management:604:*:*:*:portugal:*:*:*
    • cpe:2.3:a:sap:erp_human_capital_management:608:*:*:*:portugal:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.