CVE-2021-40499 PUBLISHED CVSS 9.800000190734863 CRITICAL

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

EPSS 0.69% · 71.6th percentile

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.69%
71.6th percentile

Affected Products

VendorProductVersions
sapnetweaver_application_server_abap7.70, 7.70_pi, 7.70byd
SAP SESAP NetWeaver Application Server for ABAP (SAP Cloud Print Manager and SAPSprint)< 7.70, < 7.70 PI, < 7.70BYD

Timeline

References

Open in Interactive Console →