CVE-2021-33698CWE-434

SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format…

Critical · published September 15, 2021

CVSS v3.0
9.9
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation.

The record
Technical detail
CVSS v3.0
9.9 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01099 · 65.4th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2021-09-15T18:01Z
EPSS history
Timeline
  • 15 SEP 18:01Z
    SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format…
    cvelistv5