cbcvebase.
CVE-2021-38178
published 2021-10-12

CVE-2021-38178: The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756…

PriorityP351high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.25%
66.1th percentile
The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.

Affected

42 ranges· showing 25
VendorProductVersion rangeFixed in
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.