CVE-2021-33688: SAP Business One

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained.

Affected products

• SAP Business One: version 10.0 only

Published 2021-09-14. Last modified 2026-06-17.