Vulners
Lucene search
CVE-2021-33701
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | SAP Netweaver IUUC_RECON_RC_COUNT_TABLE_BIG ABAP Code Injection Exploit | 15 Dec 202100:00 | – | zdt |
| SAP Netweaver IUUC_RECON_RC_COUNT_TABLE_BIG SQL Injection Exploit | 15 Dec 202100:00 | – | zdt |
 | CVE-2021-33701 | 15 Sep 202119:15 | – | attackerkb |
 | The vulnerability of the SAP S/4HANA software platform and the DMIS Mobile Plug-In import control server lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary SQL queries. | 28 Mar 202200:00 | – | bdu_fstec |
 | CVE-2021-33701 | 13 Aug 202113:57 | – | circl |
 | SAP ERP SQL注入漏洞 | 10 Aug 202100:00 | – | cnnvd |
 | CVE-2021-33701 | 15 Sep 202118:01 | – | cvelist |
 | EUVD-2021-20378 | 7 Oct 202500:30 | – | euvd |
 | Several vulnerabilities fixed in SAP products | 10 Aug 202100:00 | – | ncsc |
 | CVE-2021-33701 | 15 Sep 202119:15 | – | nvd |
10
[
{
"product": "DMIS Mobile Plug-In",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< DMIS 2011_1_620"
},
{
"status": "affected",
"version": "< 2011_1_640"
},
{
"status": "affected",
"version": "< 2011_1_700"
},
{
"status": "affected",
"version": "< 2011_1_710"
},
{
"status": "affected",
"version": "< 2011_1_730"
},
{
"status": "affected",
"version": "< 710"
},
{
"status": "affected",
"version": "< 2011_1_731"
},
{
"status": "affected",
"version": "< 2011_1_752"
},
{
"status": "affected",
"version": "< 2020"
}
]
},
{
"product": "SAP S/4HANA",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< SAPSCORE 125"
},
{
"status": "affected",
"version": "< S4CORE 102"
},
{
"status": "affected",
"version": "< 102"
},
{
"status": "affected",
"version": "< 103"
},
{
"status": "affected",
"version": "< 104"
},
{
"status": "affected",
"version": "< 105"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| IT_WHERE_CLAUSE | parameter | IUUC_RECON_RC_COUNT_TABLE_BIG | ABAP code injection via unfiltered IT_WHERE_CLAUSE in remote-enabled function module IUUC_RECON_RC_COUNT_TABLE_BIG | CWE-89 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:55Current
9.7High risk
Vulners AI Score9.7
CVSS 26.5
CVSS 3.19.1
CVSS 39.1
EPSS0.02077