CVE-2021-21486: SAP Enterprise Financial Services

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

• SAP Enterprise Financial Services: version 1.01 only; version 1.02 only; version 1.03 only; version 1.04 only; version 1.05 only; version 6.00 only; …

Published 2021-03-09. Last modified 2026-06-17.