What’s Vulnerable › Vulnerabilities

CVE-2021-33694

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-15 · updated 2026-06-17
• Weakness: CWE-79

Description

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting.

Affected products

• SAP SE SAP Cloud Connector: 2.0

References

• https://launchpad.support.sap.com/#/notes/3058553
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806
• https://launchpad.support.sap.com/#/notes/3058553
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806

Get alerted when CVE-2021-33694 or the next vulnerability affects your stack