Description

SAP NetWeaver Development Infrastructure is vulnerable to an SSRF vulnerability. An attacker could exploit this vulnerability to compromise the server.

Remediation

Upgrade to the latest version of SAP DI

References

CVE-2021-33690 Detail

[CVE-2021-33690] Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure

Related Vulnerabilities

Apache OFBiz SOAPService Deserialization RCE

RCE with Spring Data Commons

WordPress pingback scanner

WordPress Plugin JSM file_get_contents() Shortcode Server-Side Request Forgery (2.7.0)

Code Evaluation (Perl)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Tags

Acumonitor SSRF CWE-918 CVE-2021-33690