CVE-2021-44231

Katalog CVE

CVSS 9.8 · Critical EPSS 1,4%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada sap abap platform, sap netweaver application server abap. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Rincian

Terbit di NVD

14 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://launchpad.support.sap.com/#/notes/3119365 permissions required · advisory vendor
• https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 advisory vendor