SEPTEMBER 29, 2026
Live Feed
Back to database
Case File

CVE-2021-37535

CRITICAL · CVSS 9.8 EPSS 1.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-09-14 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java.

CVE
CVE-2021-37535
Severity
CRITICAL
CVSS
9.8
EPSS
1.25%
Java

Original NVD Description

SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.

Related CVEs

Other vulnerabilities affecting the same vendor(s)