CVE-2021-44231

2021-12-1415:44:08

sap

www.cve.org

text extraction

reports vulnerability

code injection

application control

AI Score

9.7

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

CNA Affected

[
  {
    "product": "SAP ABAP Server & ABAP Platform (Translation Tools)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 701"
      },
      {
        "status": "affected",
        "version": "< 740"
      },
      {
        "status": "affected",
        "version": "< 750"
      },
      {
        "status": "affected",
        "version": "< 751"
      },
      {
        "status": "affected",
        "version": "< 752"
      },
      {
        "status": "affected",
        "version": "< 753"
      },
      {
        "status": "affected",
        "version": "< 754"
      },
      {
        "status": "affected",
        "version": "< 755"
      },
      {
        "status": "affected",
        "version": "< 756"
      },
      {
        "status": "affected",
        "version": "< 804"
      }
    ]
  }
]