CVE-2021-27621

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for Java versions 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50

Description The issue allows attackers to access restricted information by entering a malicious server name in the UserAdmin application.

Recommendations For versions 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50, consider restricting access to the UserAdmin application until a fix is available. As a temporary workaround, consider validating server names to prevent malicious input. At the moment, there is no information about a newer version that contains a fix for this vulnerability.