CVE-2021-38178: sap_se sap netweaver as abap and abap platform
Vulnerability summary
CVE-2021-38178 is a high (CVSS 8.8) vulnerability in sap_se sap netweaver as abap and abap platform. EPSS estimates a 1.29% chance of exploitation in the next 30 days, higher than 70% of scored vulnerabilities.
Timeline
- 12-10-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.29%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.29% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Sap2 products
- netweaver_abap700 | 701 | 702 | 710 | 730 | 731 | 740 | 750 | 751 | 752 | 7.53 | 754 | 755 | 756
- netweaver_application_server_abap700 | 701 | 702 | 710 | 730 | 731 | 740 | 750 | 751 | 752 | 753 | 754 | 755 | 756
Sap_se1 product
- sap netweaver as abap and abap platform< 700 | < 701 | < 702 | < 710 | < 730 | < 731 | < 740 | < 750 | < 751 | < 752 | < 753 | < 754 | < 755 | < 756
2 vendors · 3 products