SAP Contact Center vulnerabilities

4 CVEs affecting SAP Contact Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-33675, published 2021-09-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-33672, published 2021-09-14. Critical severity, CVSS 9.6. EPSS: 1.1% chance of exploitation in the next 30 days. Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat…
CVE-2021-33673, published 2021-09-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting…
CVE-2021-33675, published 2021-09-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS)…
CVE-2021-33674, published 2021-09-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS)…