CVE-2021-33698: SAP Business One

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation.

Affected products

• SAP Business One: version 10.0 only

Published 2021-09-15. Last modified 2026-06-17.