CVE-2021-38178

CVE-2021-38178: vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

Published · Updated

Follow this CVE+ Monitor ABAP Platform+ Monitor SAP NetWeaver AS ABAP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.
Affected products
SAP SE · SAP NetWeaver AS ABAP and ABAP Platform
Related CVEs — SAP NetWeaver AS ABAP and ABAP Platform

In the same product, most dangerous first.

CVE-2021-27610CRITICALCVE-2021-27610EPSS 1.3%CVE-2021-38181—CVE-2021-38181EPSS 1.1%CVE-2021-40495—CVE-2021-40495EPSS 1.1%CVE-2021-33684MEDIUMCVE-2021-33684EPSS 1.0%CVE-2021-40496—CVE-2021-40496EPSS 0.9%CVE-2021-33677MEDIUMCVE-2021-33677EPSS 0.9%