VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026

CVE-2021-44231

CVE-2021-44231

Description

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Affected products

22
  • SAP/SAPllm-fuzzy
  • SAP SE/SAP ABAP Server & ABAP Platform (Translation Tools)v5
    Range: < 701
  • SAP/Abap Platform10 versions
    cpe:2.3:a:sap:abap_platform:701:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:sap:abap_platform:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:756:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform:804:*:*:*:*:*:*:*
  • SAP/NetWeaver Application Server for ABAP10 versions
    cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:804:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.