CVE-2021-21479highobserved exploitation

CVE-2021-21479: high-severity vulnerability in SAP SE SCIMono

Published · Updated

Follow this CVE+ Monitor SCIMono+ Monitor com.sap.scimono:scimono-server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 8.1epss 10%
from disclosure to weapon
Published on NVDFeb 9
VulnCheck+1024d
In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Affected products
SAP SE · SCIMono