What’s Vulnerable › Vulnerabilities

CVE-2021-27613

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-11 · updated 2026-06-17

Description

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to Information Disclosure and highly impact system confidentiality, integrity and availability.

Affected products

• SAP SE SAP Business One (Cookbooks): 0.1.9

References

• https://launchpad.support.sap.com/#/notes/3049755
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655
• https://launchpad.support.sap.com/#/notes/3049755
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655

Get alerted when CVE-2021-27613 or the next vulnerability affects your stack