Riskcovery

CVE-2021-33676

State
Published
Severity
6.8 Medium
Published
Jul 14, 2021
Updated
Aug 3, 2024
Reserved
May 28, 2021

Read the record on cve.org

Description

A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.

Scores

CVSSScoreVectorSource
3.06.8 MediumCVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsap

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP CRMSAP SE
  • < 700Affected
  • < 701Affected
  • < 702Affected
  • < 712Affected
  • < 713Affected
  • < 714Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.