← Back to browse · API

CVE-2021-37535

Severity
CRITICAL
CVSS
10.0
EPSS
0.01251
Risk score
40.44
CISA KEV
No
PoC
No
Published
2021-09-14
Modified
2024-08-04
First seen
2026-08-07
Aliases
EUVD-2021-24096, GHSA-9Q55-3953-MQGF
Products
SAP SE:SAP NetWeaver Application Server Java (JMS Connector Service) < 7.11, SAP SE:SAP NetWeaver Application Server Java (JMS Connector Service) < 7.20, SAP SE:SAP NetWeaver Application Server Java (JMS Connector Service) < 7.30, SAP SE:SAP NetWeaver Application Server Java (JMS Connector Service) < 7.31, SAP SE:SAP NetWeaver Application Server Java (JMS Connector Service) < 7.40, SAP SE:SAP NetWeaver Application Server Java (JMS Connector Service) < 7.50
Sources
euvd EUVD-2021-24096

Description

SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.

References