CVE-2021-33692: SAP Cloud Connector

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories.

Affected products

• SAP Cloud Connector: version 2.0 only

Published 2021-09-15. Last modified 2026-06-17.