{"affected":[{"affectedData":[{"product":"SAP NetWeaver Knowledge Management","vendor":"SAP SE","versions":[{"status":"affected","version":"< 7.01"},{"status":"affected","version":"< 7.02"},{"status":"affected","version":"< 7.30"},{"status":"affected","version":"< 7.31"},{"status":"affected","version":"< 7.40"},{"status":"affected","version":"< 7.50"}]}],"source":"cna@sap.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sap:netweaver_knowledge_management:7.01:*:*:*:*:*:*:*","matchCriteriaId":"7A00D98D-C347-4C9B-A794-6AE764FC7837","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_knowledge_management:7.02:*:*:*:*:*:*:*","matchCriteriaId":"65915328-FCAE-4F39-9E81-1C5B0A8D68AE","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*","matchCriteriaId":"69E7BD55-6020-4CF5-9B1C-AAC6161403E0","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_knowledge_management:7.31:*:*:*:*:*:*:*","matchCriteriaId":"F6A9823F-8736-44E1-8F51-7149236A85C2","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_knowledge_management:7.40:*:*:*:*:*:*:*","matchCriteriaId":"67365283-2C5E-448E-A9F7-8AA033B57F67","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_knowledge_management:7.50:*:*:*:*:*:*:*","matchCriteriaId":"95298857-D440-4323-ACAE-A1097DBC5C13","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability."},{"lang":"es","value":"Knowledge Management versiones 7.01, 7.02, 7.30, 7.31, 7.40, 7.50, permiten a un atacante remoto con privilegios básicos deserializar unos datos controlados por el usuario sin comprobación, conllevando a una deserialización no segura que desencadena el código del atacante y, por lo tanto, afecta la Disponibilidad"}],"id":"CVE-2021-21488","lastModified":"2026-06-17T03:35:40.220","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":4.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@sap.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-03-09T15:15:15.130","references":[{"source":"cna@sap.com","tags":["Permissions Required","Vendor Advisory"],"url":"https://launchpad.support.sap.com/#/notes/2983436"},{"source":"cna@sap.com","tags":["Vendor Advisory"],"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"],"url":"https://launchpad.support.sap.com/#/notes/2983436"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107"}],"sourceIdentifier":"cna@sap.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"nvd@nist.gov","type":"Primary"}]}