CVE-2021-44231

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Link	Resource
https://launchpad.support.sap.com/#/notes/3119365	Permissions Required Vendor Advisory
https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021	Vendor Advisory

Configuration 1

cpe:2.3:a:sap:abap_platform:701:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:751:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:753:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:755:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:740:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:750:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:754:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:752:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:756:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:804:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:804:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*

---

Published : 2021-12-14 04:15

Updated : 2022-10-05 02:16

---

NVD link : CVE-2021-44231

Mitre link : CVE-2021-44231

Abap Platform

Sap

CWE-94