CVE-2021-40497 Vulnerability Details

  /     /     /  

CVE-2021-40497 Metadata Quick Info

CVE Published: 12/10/2021 | CVE Updated: 04/08/2024 | CVE Year: 2021
Source: sap | Vendor: SAP SE | Product: SAP BusinessObjects Analysis, (edition for OLAP)
Status : PUBLISHED

---

CVE-2021-40497 Description

SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation could lead to exposure of some system specific data like its version.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Information Disclosure
Source: SAP SE

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).