CVE-2021-21482: sap se sap netweaver master data management
Vulnerability summary
CVE-2021-21482 is a high (CVSS 8.3) vulnerability in sap se sap netweaver master data management. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 35.4% of scored vulnerabilities.
Timeline
- 13-04-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If successful, the attacker could obtain access to highly sensitive data and MDM administrative privileges leading to information disclosure vulnerability thereby affecting the confidentiality and integrity of the application. This happens when security guidelines and recommendations concerning administrative accounts of an SAP NetWeaver Master Data Management installation have not been thoroughly reviewed.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST8.3HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
EPSS trend
Probability
0.42%
Chance of exploitation in the next 30 days
Percentile
35%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.42% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Sap1 product
- netweaver_master_data_management7.10.750 | 7.10
Sap se1 product
- sap netweaver master data management< 710 | < 710.750
2 vendors · 2 products