VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 12, 2021· Updated Jun 17, 2026

CVE-2021-38178

CVE-2021-38178

Description

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.

Affected products

31
  • SAP/Netweaver Abap15 versions
    cpe:2.3:a:sap:netweaver_abap:700:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:sap:netweaver_abap:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:710:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:756:*:*:*:*:*:*:*
    • (no CPE)range: 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756
  • SAP/NetWeaver Application Server for ABAP14 versions
    cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*
  • SAP/Abap Platformllm-fuzzy
    Range: 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756
  • SAP SE/SAP NetWeaver AS ABAP and ABAP Platformv5
    Range: < 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.