CVE-2021-33678: SAP NetWeaver Application Server Abap

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some critical information and could make the SAP system completely unavailable.

Affected products

• SAP NetWeaver Application Server Abap: version 75a only; version 75b only; version 75c only; version 75d only; version 75e only; version 75f only; …

Published 2021-07-14. Last modified 2026-06-17.