Vulnerability Details CVE-2021-21444
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.9%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 5.8
References
Products affected by CVE-2021-21444
-
cpe:2.3:a:sap:businessobjects_business_intelligence:410
-
cpe:2.3:a:sap:businessobjects_business_intelligence:420
-
cpe:2.3:a:sap:businessobjects_business_intelligence:430