CVE-2021-27611: SAP NetWeaver Application Server Abap

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service.

Affected products

• SAP NetWeaver Application Server Abap: version 700 only; version 701 only; version 702 only; version 730 only; version 731 only

Published 2021-05-11. Last modified 2026-06-17.