[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg2d3Nk8rOchm7v-uwX7fMCsOLMxvcnoC6hTfz70o6wk":3,"g5a-risk:CVE-2021-21474":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":52,"weaknesses":63,"weaknessesCount":72,"isActivelyExploited":73,"cisaInfo":27,"otxData":27,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":110,"notableEvents":111},"CVE-2021-21474","What is CVE-2021-21474?","SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidating the digital signature, this allows them to impersonate as user in HANA database and be able to read the contents in the database.","SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for...","2021-02-09T21:15:13.393","2022-07-12T17:42:04.277",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":24,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED","MEDIUM",null,1.2,5.2,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",5.5,8,4.9,0.00701,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"sap","hana_database","1.00","cpe:2.3:a:sap:hana_database:1.00:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"2.00","cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*",2,[54,59],{"url":55,"source":56,"tags":57},"https:\u002F\u002Flaunchpad.support.sap.com\u002F#\u002Fnotes\u002F2992154","Sap",[58],"Permissions Required",{"url":60,"source":56,"tags":61},"https:\u002F\u002Fwiki.scn.sap.com\u002Fwiki\u002Fpages\u002Fviewpage.action?pageId=568460543",[62],"Vendor Advisory",[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",1,false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2021-21474? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-21474, a medium severity cyber security vulnerability from 2021. SAP HANA Database, versions - 1.0, 2.0, accepts SAML toke...","CVE-2021-21474, CVE-2021-21474 vulnerability, CVE-2021-21474 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, sap security, hana_database vulnerability","\u002Fwhat-is\u002Fcve-2021-21474",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-21474","Cybersecurity","CVE-2021-21474, CVE-2021-21474 vulnerability, CVE-2021-21474 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":104,"Negate":27,"CPEMatch":105},"OR",[106,108],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"528C05CB-315F-465C-8C25-EF85AA7D19B9",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4C6CA542-7071-48B6-B135-3AE9B4BB1DC5",[],[],{"lastModified":11,"cacheTime":113,"version":33},1792371046606,{"score":115,"band":116,"action":117,"scoredAt":118},25,"Low","Monitor","2026-10-16T06:50:27.704666+00:00"]