SAP NetWeaver Master Data Management vulnerabilities

2 CVEs affecting SAP NetWeaver Master Data Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21482, published 2021-04-13.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-21469, published 2021-01-12. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in…
• CVE-2021-21482, published 2021-04-13. High severity, CVSS 8.3. EPSS: 0.4% chance of exploitation in the next 30 days. SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If…