CVE-2021-33666 MEDIUM

CVE-2021-33666

Vendor Sap Se
Product SAP Commerce Cloud
Published June 9, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferation.

Key dates

02Disclosure timeline

June 9, 2021 CVE published
August 3, 2024 Record updated