Stored Cross-Site Scripting Vulnerability in SAP NetWeaver Enterprise Portal

CVE-2021-21489

What is CVE-2021-21489?

The SAP NetWeaver Enterprise Portal has a vulnerability that arises from inadequate encoding of user-related data, leading to a stored Cross-Site Scripting (XSS) scenario. An attacker with administrative access can exploit this vulnerability by embedding a malicious script into the portal. Once executed by an unsuspecting user, this script could undermine the confidentiality and integrity of sensitive content within the portal, posing significant risks to user data and overall system security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References