CVE-2021-33677medium

CVE-2021-33677: medium-severity vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

Published · Updated

Follow this CVE+ Monitor ABAP Platform+ Monitor SAP NetWeaver AS ABAP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.9%
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
SAP SE · SAP NetWeaver AS ABAP and ABAP Platform
Related CVEs — SAP NetWeaver AS ABAP and ABAP Platform

In the same product, most dangerous first.

CVE-2021-27610CRITICALCVE-2021-27610EPSS 1.3%CVE-2021-38178—CVE-2021-38178EPSS 1.3%CVE-2021-38181—CVE-2021-38181EPSS 1.1%CVE-2021-40495—CVE-2021-40495EPSS 1.1%CVE-2021-33684MEDIUMCVE-2021-33684EPSS 1.0%CVE-2021-40496—CVE-2021-40496EPSS 0.9%