CVE-2021-21479: SAP Scimono

Critical severity, CVSS 9.1. EPSS: 10.1% chance of exploitation in the next 30 days.

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.

Affected products

• SAP Scimono: before 0.0.19 (fixed in 0.0.19)

Published 2021-02-09. Last modified 2026-06-17.