Vulnerability Details CVE-2021-33676
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.8%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 6.5
References
Products affected by CVE-2021-33676
-
cpe:2.3:a:sap:customer_relationship_management:700
-
cpe:2.3:a:sap:customer_relationship_management:701
-
cpe:2.3:a:sap:customer_relationship_management:702
-
cpe:2.3:a:sap:customer_relationship_management:712
-
cpe:2.3:a:sap:customer_relationship_management:713
-
cpe:2.3:a:sap:customer_relationship_management:714