CVE-2021-33688

Publication date

2021-09-14 11:24:52

Family

sap

State

PUBLISHED

Description

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained.