CVE-2021-33667: Input Validation

Published Jul 14, 2021

Updated

Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.

Affected Software

2 affected components

SAP BusinessObjects Web Intelligence=420

SAP BusinessObjects Web Intelligence=430

Event History

Jul 14, 2021

CVE Published

via MITRE·11:03 AM

Data Sourced

via MITRE·11:03 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this SAP Business Objects Web Intelligence vulnerability?

The vulnerability ID is CVE-2021-33667.

What is the title of this SAP Business Objects Web Intelligence vulnerability?

The title of this vulnerability is 'Under certain conditions SAP Business Objects Web Intelligence (BI Launchpad) versions - 420 430 all…'

What is the severity of the CVE-2021-33667 vulnerability?

The severity of the CVE-2021-33667 vulnerability is medium with a severity value of 4.3.

Which versions of SAP Business Objects Web Intelligence are affected by this vulnerability?

The versions 420 and 430 of SAP Business Objects Web Intelligence are affected by this vulnerability.

How can an attacker exploit this vulnerability?

An attacker can exploit this vulnerability by accessing jsp source code through SDK calls of the Analytical Reporting bundle of SAP Business Objects Web Intelligence.