CVE-2021-27621: SAP NetWeaver Application Server For Java

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows attackers to access restricted information by entering malicious server name.

Affected products

• SAP NetWeaver Application Server For Java: version 7.11 only; version 7.20 only; version 7.30 only; version 7.31 only; version 7.40 only; version 7.50 only

Published 2021-06-09. Last modified 2026-06-17.