RCE in SAP Business Warehouse
CVE-2021-21466
SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attacker can create a malicious ABAP report which could be used to get access to sensitive data, to inject malicious UPDATE statements that could have also impact on the operating system, to disrupt the functionality of the SAP system which can thereby lead to a Denial of Service.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.031 (86.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Sap Business_warehouse — versions 700, 701, 702
- Sap Bw\/4hana — versions 100, 200
- Sap Se Business Warehouse — versions < 700, < 701, < 702
- Sap Se Bw/4hana — versions < 100, < 200
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cna@sap.com (x_refsource_MISC, Vendor Advisory)
- cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)
- cna@sap.com (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
- cna@sap.com (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-21466?
- CVE-2021-21466 is a high-severity vulnerability in SAP Business Warehouse, classified under Code Injection. CVSS score: 8.8/10. Published 2021-01-12.
- How severe is CVE-2021-21466?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2021-21466 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.