CVE-2021-44231

published 2021-12-14

CVE-2021-44231: Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the…

Priority P3 50 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Affected

30 ranges · showing 25

Vendor	Product	Version range	Fixed in
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	abap_platform	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap	netweaver_application_server_abap	—	—
sap_se	sap_abap_server_abap_platform	< 701	701
sap_se	sap_abap_server_abap_platform	< 740	740
sap_se	sap_abap_server_abap_platform	< 750	750
sap_se	sap_abap_server_abap_platform	< 751	751
sap_se	sap_abap_server_abap_platform	< 752	752

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94