CVE-2021-33692 is a vulnerability in SAP Cloud Connector
Published on September 15, 2021
SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories.
Products Associated with CVE-2021-33692
Want to know whenever a new CVE is published for SAP Cloud Connector? stack.watch will email you.
Affected Versions
SAP SE SAP Cloud Connector Version < 2.0 is affected by CVE-2021-33692Exploit Probability
EPSS
0.35%
Percentile
57.04%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.