{"cvss":8.1,"datePublished":"2023-11-30T00:00:00Z","dateUpdated":"2023-11-30T00:00:00Z","description":"In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.","dueDate":"","id":"CVE-2021-21479","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"scimono","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"SAP scimono Improper Neutralization of Special Elements in Output Used by a Downstream Component","vendor":"SAP"}