CVE-2021-33707: SAP NetWeaver Knowledge Management

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity.

Affected products

• SAP NetWeaver Knowledge Management: version 7.30 only; version 7.31 only; version 7.40 only; version 7.50 only

Published 2021-08-10. Last modified 2026-06-17.