CVE-2021-40504

—

CVSS 3.1

4.9 medium

EPSS

<1%p48

Published

Nov 10, 2021 (Nov 10, 2021)

Modified

Jun 17, 2026

Description

A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.

Vendors: sap
Products: netweaver application server abap
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.