CVE-2021-38175
Assigner: sap
Published: 2021-09-14T11:21:42
State: PUBLISHED
affected: product: SAP Analysis for Microsoft Office
vendor: SAP SE
versions: status: affected
version: < 2.8
descriptions: value: SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over the network, and gather or change information in the current system without user interaction. The attack would not lead to an impact on the availability of the system, but there would be an impact on integrity and confidentiality.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
version: 3.0
problemTypes: descriptions: description: Information Disclosure
type: text