PT-2021-21985

CVE-2021-38176

·

Published

2021-09-14

·

Updated

2022-07-12

Description by

CVSS 3.1
9.9
Critical
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: SAP NZDT (affected versions not specified)
Description: The issue arises from improper input sanitization, allowing an authenticated user with specific privileges to remotely execute manipulated queries or inject ABAP code, thereby gaining access to the Backend Database. Successful exploitation could lead to a complete compromise of the system's confidentiality, integrity, and availability.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾