CVE-2021-33678

A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some critical information and could make the SAP system completely unavailable.

Affected products

Sap Netweaver As Abap

Sap Netweaver Application Server Abap

= 75a, 75b, 75c, 75d, 75e, 75f, 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752

CVSS 2.0

7.5 HIGH

CVSS 3.1

6.5 MEDIUM

EPSS

2.5% (84th percentile)

Weakness

CWE-95, CWE-94

NVD status

Modified

Published

2021-07-14