by Kastro
Paper/Archive/CVE-2021-21465

CVE-2021-21465

SAP SE SAP Business Warehouse — The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database.

EPSS 4%CVSS 9.9
critical.is priorityof 100
48
CVSS 9.9 (CNA, NVD agree)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 89.8.898 × 2018.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can include their own SQL commands which the database will execute without properly sanitizing the untrusted data leading to SQL injection vulnerability which can fully compromise the affected SAP system.

Affected

ProductAffectedFixed inSource
SAP Business Warehouse< 710–CNA
SAP Business Warehouse< 711–CNA
SAP Business Warehouse< 730–CNA
SAP Business Warehouse< 731–CNA
SAP Business Warehouse< 740–CNA
SAP Business Warehouse< 750–CNA
SAP Business Warehouse< 751–CNA
SAP Business Warehouse< 752–CNA
SAP Business Warehouse< 753–CNA
SAP Business Warehouse< 754–CNA
SAP Business Warehouse< 755–CNA
SAP Business Warehouse< 782–CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
sap (CNA)9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refwiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476reflaunchpad.support.sap.com/#/notes/2986980refseclists.org/fulldisclosure/2022/May/42refpacketstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html