Read the docs
TI-2021-15854 Aliases CVE-2021-38176GHSA-4qx6-hc3f-6gj9

SQL injection in SAP S/4HANA

Priority MEDIUM 41CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-89.

Summary

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availability of the system.

Why it matters now

EPSS 0.01268 69th percentileScored 2026-11-07
Fix Fixed SAP S/4HANA (SAP SE): 1511, 1610, 1709 +4SAP LT Replication Server (SAP SE): 2.0, 3.0+3 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SAPSAP S/4HANAbefore 1511; before 1610; before 1709; before 1809; before 1909; before 2020; before 20211511, 1610, 1709, 1809, 1909, 2020, 2021Patch availableCNA
SAPSAP LT Replication Serverbefore 2.0; before 3.02.0, 3.0Patch availableCNA
SAPSAP LTRS for S/4HANAbefore 1.01.0Patch availableCNA
SAPSAP Test Data Migration Serverbefore 4.04.0Patch availableCNA
SAPSAP Landscape Transformationbefore 2.02.0Patch availableCNA
  • SAP S/4HANA VendorSAP Affected before 1511; before 1610; before 1709; before 1809; before 1909; before 2020; before 2021 Fixed in 1511, 1610, 1709, 1809, 1909, 2020, 2021 Patch available CNA
  • SAP LT Replication Server VendorSAP Affected before 2.0; before 3.0 Fixed in 2.0, 3.0 Patch available CNA
  • SAP LTRS for S/4HANA VendorSAP Affected before 1.0 Fixed in 1.0 Patch available CNA
  • SAP Test Data Migration Server VendorSAP Affected before 4.0 Fixed in 4.0 Patch available CNA
  • SAP Landscape Transformation VendorSAP Affected before 2.0 Fixed in 2.0 Patch available CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:sap:landscape_transformation:2.0:*:*:*:*:*:*:*2.0VulnerableSAP
cpe:2.3:a:sap:landscape_transformation_replication_server:1.0:*:*:*:*:s\/4hana:*:*1.0VulnerableSAP
cpe:2.3:a:sap:landscape_transformation_replication_server:2.0:*:*:*:*:*:*:*2.0VulnerableSAP
cpe:2.3:a:sap:landscape_transformation_replication_server:3.0:*:*:*:*:*:*:*3.0VulnerableSAP
cpe:2.3:a:sap:s\/4hana:1511:*:*:*:*:*:*:*1511VulnerableSAP
cpe:2.3:a:sap:s\/4hana:1610:*:*:*:*:*:*:*1610VulnerableSAP
cpe:2.3:a:sap:s\/4hana:1709:*:*:*:*:*:*:*1709VulnerableSAP
cpe:2.3:a:sap:s\/4hana:1809:*:*:*:*:*:*:*1809VulnerableSAP
cpe:2.3:a:sap:s\/4hana:1909:*:*:*:*:*:*:*1909VulnerableSAP
cpe:2.3:a:sap:s\/4hana:2020:*:*:*:*:*:*:*2020VulnerableSAP
  • cpe:2.3:a:sap:landscape_transformation:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·SAP
  • cpe:2.3:a:sap:landscape_transformation_replication_server:1.0:*:*:*:*:s\/4hana:*:* Versions 1.0 Vulnerable ·SAP
  • cpe:2.3:a:sap:landscape_transformation_replication_server:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·SAP
  • cpe:2.3:a:sap:landscape_transformation_replication_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·SAP
  • cpe:2.3:a:sap:s\/4hana:1511:*:*:*:*:*:*:* Versions 1511 Vulnerable ·SAP
  • cpe:2.3:a:sap:s\/4hana:1610:*:*:*:*:*:*:* Versions 1610 Vulnerable ·SAP
  • cpe:2.3:a:sap:s\/4hana:1709:*:*:*:*:*:*:* Versions 1709 Vulnerable ·SAP
  • cpe:2.3:a:sap:s\/4hana:1809:*:*:*:*:*:*:* Versions 1809 Vulnerable ·SAP
  • cpe:2.3:a:sap:s\/4hana:1909:*:*:*:*:*:*:* Versions 1909 Vulnerable ·SAP
  • cpe:2.3:a:sap:s\/4hana:2020:*:*:*:*:*:*:* Versions 2020 Vulnerable ·SAP
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sap:s\/4hana:2021:*:*:*:*:*:*:*2021VulnerableSAP
cpe:2.3:a:sap:test_data_migration_server:4.0:*:*:*:*:*:*:*4.0VulnerableSAP
  • cpe:2.3:a:sap:s\/4hana:2021:*:*:*:*:*:*:* Versions 2021 Vulnerable ·SAP
  • cpe:2.3:a:sap:test_data_migration_server:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·SAP

Remediation

  • Fix · CNA SAP S/4HANA (SAP SE) Fixed in 1511, 1610, 1709, 1809, 1909, 2020, 2021
  • Fix · CNA SAP LT Replication Server (SAP SE) Fixed in 2.0, 3.0
  • Fix · CNA SAP LTRS for S/4HANA (SAP SE) Fixed in 1.0
  • Fix · CNA SAP Test Data Migration Server (SAP SE) Fixed in 4.0
  • Fix · CNA SAP Landscape Transformation (SAP SE) Fixed in 2.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-38176
  2. 2026-10-03 Alias added: GHSA-4qx6-hc3f-6gj9

References

Advisory 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences