by Kastro
Paper/Archive/CVE-2021-21479

CVE-2021-21479

SAP SE SCIMono — In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrit…

EPSS 10%CVSS 9.1
critical.is priorityof 100
46
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 95.6.956 × 2019.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.

Affected

ProductAffectedFixed inSource
SCIMono< 0.0.19–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
sap (CNA)8.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

References

refgithub.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c