CVE-2021-33688

2021-09-1411:24:52

sap

www.cve.org

sap business one

business privileges

crafted database queries

restricted information

back-end database

AI Score

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained.

CNA Affected

[
  {
    "product": "SAP Business One",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 10.0"
      }
    ]
  }
]