CVE-2021-21473: SAP NetWeaver Application Server Abap

Medium severity, CVSS 6.3. EPSS: 1.2% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, contains function module SRM_RFC_SUBMIT_REPORT which fails to validate authorization of an authenticated user thus allowing an unauthorized user to execute reports in SAP NetWeaver ABAP Platform.

Affected products

• SAP NetWeaver Application Server Abap: version 700 only; version 702 only; version 710 only; version 711 only; version 730 only; version 731 only; …

Published 2021-06-09. Last modified 2026-06-17.