CVE-2021-21487

SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges

Medium · published March 9, 2021

CVSS v3.0
6.8
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00796 · 56.0th percentile
Published
2021-03-09T14:11Z
EPSS history
Timeline
  • 09 MAR 14:11Z
    SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges
    cvelistv5