CVE-2021-33667: Input Validation
First published: Wed Jul 14 2021(Updated: )
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP BusinessObjects Web Intelligence | =420 | |
| SAP BusinessObjects Web Intelligence | =430 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this SAP Business Objects Web Intelligence vulnerability?
The vulnerability ID is CVE-2021-33667.
What is the title of this SAP Business Objects Web Intelligence vulnerability?
The title of this vulnerability is 'Under certain conditions SAP Business Objects Web Intelligence (BI Launchpad) versions - 420 430 all…'
What is the severity of the CVE-2021-33667 vulnerability?
The severity of the CVE-2021-33667 vulnerability is medium with a severity value of 4.3.
Which versions of SAP Business Objects Web Intelligence are affected by this vulnerability?
The versions 420 and 430 of SAP Business Objects Web Intelligence are affected by this vulnerability.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by accessing jsp source code through SDK calls of the Analytical Reporting bundle of SAP Business Objects Web Intelligence.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/sap
- canonical/sap businessobjects web intelligence
- version/sap businessobjects web intelligence/420
- version/sap businessobjects web intelligence/430