cve/2021/CVE-2021-40499.md

### [CVE-2021-40499](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40499)
![](https://img.shields.io/static/v1?label=Product&message=SAP%20NetWeaver%20Application%20Server%20for%20ABAP%20(SAP%20Cloud%20Print%20Manager%20and%20SAPSprint)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C7.70%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Code%20Injection&color=brighgreen)

### Description

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

### POC

#### Reference
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983

#### Github
No PoCs found on GitHub currently.