CVE-2021-33697: Medium severity sap businessobjects business intelligence platform vulnerability

Published Sep 15, 2021

Updated

Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

Affected Software

2 affected components

SAP BusinessObjects Business Intelligence=420

SAP BusinessObjects Business Intelligence=430

Remediation

Patch Available

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806

Event History

Sep 15, 2021

CVE Published

via MITRE·06:01 PM

Data Sourced

via MITRE·06:01 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this SAP BusinessObjects Business Intelligence Platform vulnerability?

The vulnerability ID for this SAP BusinessObjects Business Intelligence Platform vulnerability is CVE-2021-33697.

What is the severity of CVE-2021-33697?

The severity of CVE-2021-33697 is medium.

What is the affected software for CVE-2021-33697?

The affected software for CVE-2021-33697 is SAP BusinessObjects Business Intelligence Platform versions 420 and 430.

How can an unauthenticated attacker exploit CVE-2021-33697?

An unauthenticated attacker can exploit CVE-2021-33697 by redirecting users to a malicious site due to Reverse Tabnabbing vulnerabilities.

Are there any references for CVE-2021-33697?

Yes, there are references for CVE-2021-33697. You can find them at the following links: [link1](https://launchpad.support.sap.com/#/notes/3063048) and [link2](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806).