CVE-2021-44231
Estado: ModificadaCrítica (9.8)—
Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.29%
- Percentil entre todas las CVEs puntuadas: 69
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-94
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-44231",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cna@sap.com",
"affectedData": [
{
"vendor": "SAP SE",
"product": "SAP ABAP Server & ABAP Platform (Translation Tools)",
"versions": [
{
"status": "affected",
"version": "< 701"
},
{
"status": "affected",
"version": "< 740"
},
{
"status": "affected",
"version": "< 750"
},
{
"status": "affected",
"version": "< 751"
},
{
"status": "affected",
"version": "< 752"
},
{
"status": "affected",
"version": "< 753"
},
{
"status": "affected",
"version": "< 754"
},
{
"status": "affected",
"version": "< 755"
},
{
"status": "affected",
"version": "< 756"
},
{
"status": "affected",
"version": "< 804"
}
]
}
]
}
],
"published": "2021-12-14T16:15:09.583",
"references": [
{
"url": "https://launchpad.support.sap.com/#/notes/3119365",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"source": "cna@sap.com"
},
{
"url": "https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021",
"tags": [
"Vendor Advisory"
],
"source": "cna@sap.com"
},
{
"url": "https://launchpad.support.sap.com/#/notes/3119365",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application."
},
{
"lang": "es",
"value": "Los informes de extracción de texto usados internamente permiten a un atacante inyectar código que puede ser ejecutado por la aplicación. Un atacante podría así controlar el comportamiento de la aplicación"
}
],
"lastModified": "2026-06-17T04:12:06.037",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sap:abap_platform:701:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C04D8608-83F0-4D7F-A7A9-59B616240F14"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:740:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07710B18-BF01-4316-A258-4F1CB6269C5E"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:750:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3A631DA-1279-49AC-922E-7D7216DACC8D"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:751:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65320F25-669B-40D8-A246-07B0202C00A9"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:752:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD5559B1-08ED-4F5C-A61D-0EA13597DBE9"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:753:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1C86F45-445E-4970-A378-199A35B23F4B"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:754:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74901A8A-A556-478F-ABCD-7DCFD471210A"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:755:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B48E0FF-814F-4F9C-B5B1-87D978E1B4A4"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:756:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "623B6391-B1E3-4C2A-93C9-AB264377BACB"
},
{
"criteria": "cpe:2.3:a:sap:abap_platform:804:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F31DD4B7-2020-47BD-B1F7-DF5AFD9E635A"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7777AA80-1608-420E-B7D5-09ABECD51728"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D416C064-BB8A-4230-A761-84A93E017F79"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72491771-4492-4902-9F0C-CE6A60BAA705"
},
{
"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:804:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2132C1C0-AD61-4C85-BA07-523206815A4D"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cna@sap.com"
}