CVEvulnerability

CVE-2021-44231

9.8 CRITICAL Published 2021-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Affected configurations

• sap abap platform 701 • sap abap platform 740 • sap abap platform 750 • sap abap platform 751 • sap abap platform 752 • sap abap platform 753 • sap abap platform 754 • sap abap platform 755 • sap abap platform 756 • sap abap platform 804 • sap netweaver application server abap 701 • sap netweaver application server abap 740 • sap netweaver application server abap 750 • sap netweaver application server abap 751 • sap netweaver application server abap 752 • sap netweaver application server abap 753 • sap netweaver application server abap 754 • sap netweaver application server abap 755 • sap netweaver application server abap 756 • sap netweaver application server abap 804

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References