CVE-2021-33667: SAP Businessobjects Web Intelligence

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.

Affected products

• SAP Businessobjects Web Intelligence: version 420 only; version 430 only

Published 2021-07-14. Last modified 2026-06-17.