CVE-2021-40499

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP versions 7.70, 7.70 PI, 7.70 BYD

Description The client-side printing services SAP Cloud Print Manager and SAPSprint allow an attacker to inject code that can be executed by the application, potentially controlling the behavior of the application.

Recommendations For versions 7.70, 7.70 PI, 7.70 BYD, update to a version that includes a fix for this issue to prevent code injection attacks. As a temporary workaround, consider restricting access to the client-side printing services to minimize the risk of exploitation.