CVE-2021-21479

—

CVSS 3.1

9.1 critical

EPSS

10%p95

Published

Feb 9, 2021 (Feb 9, 2021)

Modified

Jun 17, 2026

Description

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.

Vendors: sap
Products: scimono
Weakness: CWE-74
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.1%)

In the news0 stories

No ingested article mentions this CVE yet.