Vulnetix
Try Vulnetix Request Demo
CVE-2021-33667 PUBLISHED CVSS 4.300000190734863 MEDIUM

Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.

EPSS 0.16% · 36.3th percentile

Risk Scores

CVSS v3.0
4.300000190734863
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.16%
36.3th percentile

Affected Products

VendorProductVersions
SAP SESAP Business Objects Web Intelligence (BI Launchpad)< 420, < 430
sapbusinessobjects_web_intelligence420, 430

Timeline

References

Open in Interactive Console →