6.5
CVSSv3

CVE-2021-33678

Published: 14/07/2021 Updated: 05/10/2022
CVSS v2 Base Score: 7.5 | Impact Score: 7.8 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 5.2 | Exploitability Score: 1.2
VMScore: 668
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:C

Vulnerability Summary

A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged malicious user to inject code that can be executed by the application. An attacker could thereby delete some critical information and could make the SAP system completely unavailable.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap netweaver application server abap 702

sap netweaver application server abap 750

sap netweaver application server abap 752

sap netweaver application server abap 700

sap netweaver application server abap 710

sap netweaver application server abap 730

sap netweaver application server abap 731

sap netweaver application server abap 711

sap netweaver application server abap 740

sap netweaver application server abap 751

sap netweaver application server abap 75a

sap netweaver application server abap 75b

sap netweaver application server abap 75c

sap netweaver application server abap 75d

sap netweaver application server abap 75e

sap netweaver application server abap 701

sap netweaver application server abap 75f

Exploits

The SAP application server ABAP and ABAP Platform are susceptible to code injection, SQL injection, and missing authorization vulnerabilities Multiple SAP products are affected ...