What’s Vulnerable › Vulnerabilities

CVE-2021-38178

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-12 · updated 2026-06-17

Description

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.

Affected products

• SAP SE SAP NetWeaver AS for ABAP (RFC Gateway): 700, 701, 702, 710, 730, 731 (+8)
• SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform: 700, 701, 702, 710, 730, 731 (+8)

References

• https://launchpad.support.sap.com/#/notes/3097887
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983
• https://launchpad.support.sap.com/#/notes/3097887
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983

Get alerted when CVE-2021-38178 or the next vulnerability affects your stack