Read the docs
TI-2021-15853 Aliases CVE-2021-38175GHSA-5hf5-x5wx-5v9c

SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges…

Priority LOW 30Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over the network, and gather or change information in the current system without user interaction. The attack would not lead to an impact on the availability of the system, but there would be an impact on integrity and confidentiality.

Why it matters now

EPSS 0.00817 57th percentileScored 2026-11-07
Fix Fixed SAP Analysis for Microsoft Office (SAP SE): 2.8

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SAPSAP Analysis for Microsoft Officebefore 2.82.8Patch availableCNA
  • SAP Analysis for Microsoft Office VendorSAP Affected before 2.8 Fixed in 2.8 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sap:analysis_for_microsoft_office:2.8:*:*:*:*:*:*:*2.8VulnerableSAP
  • cpe:2.3:a:sap:analysis_for_microsoft_office:2.8:*:*:*:*:*:*:* Versions 2.8 Vulnerable ·SAP

Remediation

  • Fix · CNA SAP Analysis for Microsoft Office (SAP SE) Fixed in 2.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-38175
  2. 2026-10-03 Alias added: GHSA-5hf5-x5wx-5v9c

References

Advisory 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences