CVE-2021-27609: SAP Focused Run

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.

Affected products

• SAP Focused Run: version 200 only; version 300 only

Published 2021-04-13. Last modified 2026-06-17.