CVE-2021-38178: SAP NetWeaver Abap

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.

Affected products

• SAP NetWeaver Abap: version 700 only; version 701 only; version 702 only; version 710 only; version 730 only; version 731 only; …
• SAP NetWeaver Application Server Abap: version 700 only; version 701 only; version 702 only; version 710 only; version 730 only; version 731 only; …

Published 2021-10-12. Last modified 2026-06-17.