critical9.8
CVE-2021-44231
Internally used text extraction reports allow an attacker to inject code that can be executed by the application.
Impact
Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Abap Platform | Versions 701, 740, 750, 751, 752, 753 |
| Sap | Netweaver Application Server Abap | Versions 701, 740, 750, 751, 752, 753 |