CVE-2021-27621

MEDIUM 4.9CVE-2021-27621 · Published 09/06/2021 · updated 17/06/2026

In short

CVE-2021-27621 is a MEDIUM (CVSS 4.9) vulnerability affecting netweaver application server for java (sap).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netweaver application server for java sap	`= 7.11= 7.20= 7.30= 7.31= 7.40= 7.50`	No fix yet

Description

Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows attackers to access restricted information by entering malicious server name.

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

More vulnerabilities in netweaver application server for java

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netweaver application server for java

sap

= 7.11= 7.20= 7.30= 7.31= 7.40= 7.50

No fix yet

More vulnerabilities in netweaver application server for java

See all →