VYPR
← All advisories
High severity8.8NVD Advisory· Published Jan 12, 2021· Updated Jun 17, 2026

CVE-2021-21466

CVE-2021-21466

Description

SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attacker can create a malicious ABAP report which could be used to get access to sensitive data, to inject malicious UPDATE statements that could have also impact on the operating system, to disrupt the functionality of the SAP system which can thereby lead to a Denial of Service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • SAP/Business Warehouse9 versions
    cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:711:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:782:*:*:*:*:*:*:*
  • SAP/Bw\/4hana3 versions
    cpe:2.3:a:sap:bw\/4hana:100:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:bw\/4hana:100:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:200:*:*:*:*:*:*:*
    • (no CPE)range: 100, 200
  • SAP/SAP Business Warehousellm-fuzzy
    Range: 700, 701, 702, 711, 730, 731, 740, 750, 782
  • SAP SE/SAP Business Warehousev5
    Range: < 700
  • SAP SE/SAP BW/4HANAv5
    Range: < 100

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.