CVE-2021-21485
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged user.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP NetWeaver AS for JAVA (Telnet Commands)
- Vendor
- SAP SE
- Product
- SAP NetWeaver AS for JAVA (Telnet Commands)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| ENGINEAPI 7.30, 7.31, 7.40, 7.50 | affected | Unavailable | Unavailable | Unavailable | None listed |
| ESP_FRAMEWORK 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SERVERCORE 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 | affected | Unavailable | Unavailable | Unavailable | None listed |
| J2EE-FRMW 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 | affected | Unavailable | Unavailable | Unavailable | None listed |