CVE-2021-21473

Mô tả

Tham khảo

• packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html · Exploit
• seclists.org/fulldisclosure/2022/May/42 · Exploit
• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Lỗ hổng khác của netweaver application server abap

• CVE-2026-27680TRUNG BÌNH 4.3Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading…
• CVE-2026-40135TRUNG BÌNH 6.5An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated…
• CVE-2026-27682TRUNG BÌNH 6.1Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server …
• CVE-2026-34257TRUNG BÌNH 6.1Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, …
• CVE-2026-27688TRUNG BÌNH 5.0Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read…