Back to overview

CVE-2021-37535

CRITICAL
10.0
CVSS 3.0
Description
SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.

Metadata

CVE ID
CVE-2021-37535
State
PUBLISHED
Assigner
sap
Reserved
2021-07-26 00:00 UTC
Published
2021-09-14 11:21 UTC
Last updated
2024-08-04 01:23 UTC
Vendor / Product
SAP SE / SAP NetWeaver Application Server Java (JMS Connector Service)
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products (1)
VendorProductPlatformVersions
SAP SE SAP NetWeaver Application Server Java (JMS Connector Service) — < 7.11, < 7.20, < 7.30, < 7.31 …
Weakness (CWE)
CWESourceDescription
— cna Missing Authorization Check
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.0 cna CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References (2)
Back to overview