CVE-2021-40499

published 2021-10-12

CVE-2021-40499: Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap_se	sap_netweaver_application_server_for_abap	< 7.70	7.70
sap_se	sap_netweaver_application_server_for_abap	< 7.70 PI	7.70 PI
sap_se	sap_netweaver_application_server_for_abap	< 7.70BYD	7.70BYD

CWE-94