CVE-2021-38176

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Sep 14, 2021
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availability of the system.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP S/4HANA

Vendor: SAP SE
Product: SAP S/4HANA
Platforms: Unknown
Default status: Unknown

SAP S/4HANA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
< 1511	`affected`	Unavailable	Unavailable	Unavailable	None listed
< 1610	`affected`	Unavailable	Unavailable	Unavailable	None listed
< 1709	`affected`	Unavailable	Unavailable	Unavailable	None listed
< 1809	`affected`	Unavailable	Unavailable	Unavailable	None listed
< 1909	`affected`	Unavailable	Unavailable	Unavailable	None listed
< 2020	`affected`	Unavailable	Unavailable	Unavailable	None listed
< 2021	`affected`	Unavailable	Unavailable	Unavailable	None listed

SAP LT Replication Server

Vendor: SAP SE
Product: SAP LT Replication Server
Platforms: Unknown
Default status: Unknown

SAP LT Replication Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
< 2.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
< 3.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

SAP LTRS for S/4HANA

Vendor: SAP SE
Product: SAP LTRS for S/4HANA
Platforms: Unknown
Default status: Unknown

SAP LTRS for S/4HANA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
< 1.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

SAP Test Data Migration Server

Vendor: SAP SE
Product: SAP Test Data Migration Server
Platforms: Unknown
Default status: Unknown

SAP Test Data Migration Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
< 4.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

SAP Landscape Transformation

Vendor: SAP SE
Product: SAP Landscape Transformation
Platforms: Unknown
Default status: Unknown

SAP Landscape Transformation · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
< 2.0	`affected`	Unavailable	Unavailable	Unavailable	None listed