CVE-2021-44231: SAP Abap Platform

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Affected products

• SAP Abap Platform: version 701 only; version 740 only; version 750 only; version 751 only; version 752 only; version 753 only; …
• SAP NetWeaver Application Server Abap: version 701 only; version 740 only; version 750 only; version 751 only; version 752 only; version 753 only; …

Published 2021-12-14. Last modified 2026-06-17.