CVE-2021-42063
65Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 22%
from disclosure to weapon866 days
Published on NVDDec 14
1st PoC+866d
VulnCheck+856d
exploitation probability
22%top 3% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data.
Affected products
SAP SE · SAP Knowledge Warehousepublic PoCs found — 1
vulncheckvulncheck.com/xdb/9f3a82872299unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.