medium4.3
CVE-2021-33688
SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database.
Impact
SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Business One | Version 10.0 |