SAP Infrabox vulnerabilities

2 CVEs affecting SAP Infrabox, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-33706, published 2021-08-10.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-33668, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact the confidentiality of the application.
• CVE-2021-33706, published 2021-08-10. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Due to improper input validation in InfraBox, logs can be modified by an authenticated user.