What’s Vulnerable › Vulnerabilities

CVE-2021-27611

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-11 · updated 2026-06-17
• Weakness: CWE-94

Description

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service.

Affected products

• SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform: 700, 701, 702, 730, 731

References

• https://launchpad.support.sap.com/#/notes/3046610
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655
• https://launchpad.support.sap.com/#/notes/3046610
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655

Get alerted when CVE-2021-27611 or the next vulnerability affects your stack