CVE-2021-33664: 
SAP NetWeaver Application Server ABAP vulnerability analysis and mitigation

SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAPUI - 750,752,753,754,755, SAPBASIS - 702, 731 contains a Cross-Site Scripting (XSS) vulnerability due to insufficient encoding of user-controlled inputs. This vulnerability was disclosed on June 9, 2021 (CVE Details).

The vulnerability has been assigned a CVSS v3 Base Score of 5.4 (Medium), with an Impact Score of 2.7 and Exploitability Score of 2.3. The attack vector is Network-based, requires Low attack complexity, Low privileges, and User interaction. The scope is Changed, with Low impact on both Confidentiality and Integrity, and No impact on Availability (AttackerKB).

The vulnerability allows attackers to perform Cross-Site Scripting (XSS) attacks due to insufficient encoding of user-controlled inputs. This could potentially lead to unauthorized access to sensitive information and manipulation of web application content (CVE Mitre).

SAP has released security patches to address this vulnerability. Organizations should apply the relevant security updates to affected SAP NetWeaver Application Server ABAP installations (SAP Note).