CVE-2021-44233: SAP Access Control

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.

Affected products

• SAP Access Control: version v1100_700 only; version v1100_731 only; version v1200_750 only

Published 2021-12-14. Last modified 2026-06-17.