CVE-2021-37535
SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
- Score
- CVSS 3.0 10.0 Critical
- Status
- Modified - cna@sap.com
- Published
- 2021-09-14
- Last modified
- 2024-08-04
- Weaknesses
- CWE-862
Affected products
- Netweaver Application Server Java (Sap)
- Sap Netweaver Application Server Java Jms Connector Service (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/3078609
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
