CVE-2021-27610critical

CVE-2021-27610: critical vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

Published · Updated

Follow this CVE+ Monitor ABAP Platform+ Monitor SAP NetWeaver AS ABAP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9epss 1.3%
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
SAP SE · SAP NetWeaver AS ABAP and ABAP Platform
Related CVEs — SAP NetWeaver AS ABAP and ABAP Platform

In the same product, most dangerous first.

CVE-2021-38178—CVE-2021-38178EPSS 1.3%CVE-2021-38181—CVE-2021-38181EPSS 1.1%CVE-2021-40495—CVE-2021-40495EPSS 1.1%CVE-2021-33684MEDIUMCVE-2021-33684EPSS 1.0%CVE-2021-40496—CVE-2021-40496EPSS 0.9%CVE-2021-33677MEDIUMCVE-2021-33677EPSS 0.9%