sap business-one CVE-2021-33698 is a vulnerability in SAP Business One
Published on September 15, 2021

SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation.

NVD

Weakness Type

What is an Unrestricted File Upload Vulnerability?

The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.

CVE-2021-33698 has been classified to as an Unrestricted File Upload vulnerability or weakness.


Products Associated with CVE-2021-33698

Want to know whenever a new CVE is published for SAP Business One? stack.watch will email you.

 

Affected Versions

SAP SE SAP Business One Version < 10.0 is affected by CVE-2021-33698

Exploit Probability

EPSS
0.30%
Percentile
53.36%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.