CVE-2021-38175
Published: 14 September 2021
Summary
CVE-2021-38175 is a medium-severity an unspecified weakness vulnerability in Sap Analysis For Microsoft Office. Its CVSS base score is 6.5 (Medium).
Operationally, ranked at the 46.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-24645
Vulnerability details
SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over the network, and gather or change information in the current system without user interaction. The attack would not lead to an…
more
impact on the availability of the system, but there would be an impact on integrity and confidentiality.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.