CVE-2021-40504: Medium severity sap netweaver as abap vulnerability
A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-40504?
CVE-2021-40504 is a vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform that allows transport authorizations to exceed expected display only permissions.
What is the severity of CVE-2021-40504?
The severity of CVE-2021-40504 is medium with a severity value of 4.9.
What software versions are affected by CVE-2021-40504?
Versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, and 756 of SAP NetWeaver Application Server for ABAP and ABAP Platform are affected by CVE-2021-40504.
How can I fix CVE-2021-40504?
To fix CVE-2021-40504, apply the necessary patches provided by SAP and follow the recommendations mentioned in SAP Note 3105728 and the SAP community page.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-40504?
The Common Weakness Enumeration (CWE) ID for CVE-2021-40504 is 863.