VYPR
← All advisories
Medium severity6.7NVD Advisory· Published May 11, 2021· Updated Jun 17, 2026

CVE-2021-27611

CVE-2021-27611

Description

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service.

Affected products

7
  • SAP/NetWeaver Application Server for ABAP5 versions
    cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*
  • SAP/Netweaver Abapllm-fuzzy
    Range: 700, 701, 702, 730, 731
  • SAP SE/SAP NetWeaver AS ABAPv5
    Range: < 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.