CVE-2021-21479

EPSS 78.2%

Remote Code Execution in SCIMono

Published: 2/10/2021Modified: 5/4/2026

Description

### Impact It is possible for attacker to inject and execute java expression and compromising the availability and integrity of the system. ### Patches The issue was fixed on [0.0.19 version](https://mvnrepository.com/artifact/com.sap.scimono/scimono-server/0.0.19)

Affected packages (1)

Maven/com.sap.scimono:scimono-serverfrom 0, < 0.0.19

References (4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-21479
WEBhttps://github.com/SAP/scimono/commit/413b5d75fa94e77876af0e47be76475a23745b80
WEBhttps://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c
WEBhttps://mvnrepository.com/artifact/com.sap.scimono/scimono-server/0.0.19