CVE-2021-33668: SAP Infrabox

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact the confidentiality of the application.

Affected products

• SAP Infrabox: before 1.2.1 (fixed in 1.2.1)

Published 2021-06-09. Last modified 2026-06-17.