CVE-2021-33696: SAP Businessobjects Business Intelligence

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site.

Affected products

• SAP Businessobjects Business Intelligence: version 420 only; version 430 only

Published 2021-09-15. Last modified 2026-06-17.