VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026

CVE-2021-44233

CVE-2021-44233

Description

SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.

Affected products

5
  • SAP/Access Control3 versions
    cpe:2.3:a:sap:access_control:v1100_700:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:access_control:v1100_700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:access_control:v1100_731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:access_control:v1200_750:*:*:*:*:*:*:*
  • SAP/GRC Access Controlllm-create
    Range: V1100_700, V1100_731, V1200_750
  • SAP SE/SAP GRC Access Controlv5
    Range: < V1100_700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.