CVE-2021-21445
Published: 12 January 2021
Summary
CVE-2021-21445 is a medium-severity HTTP Request/Response Smuggling (CWE-444) vulnerability in Sap Commerce Cloud. Its CVSS base score is 5.4 (Medium).
Operationally, ranked at the 39.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-8719
Vulnerability details
SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of…
more
this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.