Sap Infrabox — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Infrabox, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-33668 — CVSS 7.5 (high): Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact…
• CVE-2021-33706 — CVSS 4.3 (medium): Due to improper input validation in InfraBox, logs can be modified by an authenticated user.