CVE-2021-42066: SAP Business One

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker to discover vulnerable function in-depth application knowledge is required, but once exploited the attacker may be able to completely compromise confidentiality, integrity, and availability of the application.

Affected products

• SAP Business One: version 10.0 only

Published 2021-12-14. Last modified 2026-06-17.