CVE Vulnerability

CVE-2021-38175

SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over the network, and gather or change information in the current system without user interaction. The attack would not lead to an impact on the availability of the system, but there would be an impact on integrity and confidentiality.

5.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8 / Impact : 4.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

Scope

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 Vendor Advisory
https://launchpad.support.sap.com/#/notes/3082500 Permissions Required
Configurations

Configuration 1

cpe:2.3:a:sap:analysis_for_microsoft_office:2.8:*:*:*:*:*:*:*
Information

Published : 2021-09-14 12:15

Updated : 2022-06-28 02:11

NVD link : CVE-2021-38175

Mitre link : CVE-2021-38175

Products Affected
No products.
CWE
NVD-CWE-noinfo