CVEvulnerability

CVE-2021-27611

6.7 MEDIUM Published 2021-05-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.2 HIGH — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service.

Affected configurations

• sap netweaver application server abap 700 • sap netweaver application server abap 701 • sap netweaver application server abap 702 • sap netweaver application server abap 730 • sap netweaver application server abap 731

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References