system
Identify the affected product in <CVE-2021-40502>.
user
Which product is affected by <CVE-2021-40502>?
assistant
The affected product is SAP Commerce and version: < 2105.3, < 2011.13, < 2005.18, < 1905.34.