SAP SE Kyma

• CVE-2021-38182 Unrated Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster. 1.1%
• CVE-2021-33708 High 7.6 Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges. 0.9%