CVE-2021-40501

CVE-2021-40501 affects SAP ABAP Platform Kernel versions 7.77, 7.81, 7.85, 7.86. The root cause is missing authorization checks for an authenticated business user, enabling privilege escalation (read/modify data beyond the vulnerable system). The exploitation details are not provided in the conne...

CVE-2023-29108

The CVE-2023-29108 issue affects ABAP Platform and SAP Web Dispatcher: IP filter vulnerability due to erroneous IP netmask handling. Affected: ABAP Platform 7.85–7.91 and SAP Web Dispatcher 7.85–7.89 (kernel 7.85/7.89/7.91). Impact: may allow access to backend applications from unwanted sources. ...