SAP Abap Platform Kernel vulnerabilities

2 CVEs affecting SAP Abap Platform Kernel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-29108, published 2023-04-11.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-40501, published 2021-11-10. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authenticated business user, resulting in escalation of privileges. That means this…
• CVE-2023-29108, published 2023-04-11. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend…