Insecure Deserialization Vulnerability in SAP Knowledge Management

CVE-2021-21488

Summary

SAP Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, and 7.50 are vulnerable to insecure deserialization. This vulnerability allows a remote attacker with basic privileges to manipulate user-controlled data without adequate verification. An exploit can lead to the execution of arbitrary code in the context of the application, potentially impacting the availability of services. Organizations using affected versions are recommended to apply available patches and implement security best practices to mitigate the risks associated with this vulnerability.

References