CVE-2021-33685: SAP Business One

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows access to high level sensitive data

Affected products

• SAP Business One: version 10.0 only

Published 2021-09-14. Last modified 2026-06-17.