VYPR
← All advisories
High severity7.7NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026

CVE-2021-44232

CVE-2021-44232

Description

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.

Affected products

16
  • SAP/Saf T Framework14 versions
    cpe:2.3:a:sap:saf-t_framework:103:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:sap:saf-t_framework:103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:104:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:105:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:602:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:606:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:618:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:720:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:s4core_102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:sap_appl_600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:saf-t_framework:sap_fin_617:*:*:*:*:*:*:*
  • SAP/SAF-T Framework Transaction SAFTN_Gllm-create
  • SAP SE/SAF-T Frameworkv5
    Range: < SAP_FIN 617

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.