BO
Product
Business One
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 12Medium 17Low 0
Watch
Add Business One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31593 | 8.8 | Jul 12 | SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application Affected: 10.0 |
| CVE-2021-33704 | 8.8 | Sep 15 | The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users Affected: 10.0 |
| CVE-2021-33698 | 8.8 | Sep 15 | SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation Affected: 10.0 |
| CVE-2023-31403 | 8.0 | Nov 14 | SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder Affected: 10.0 |
| CVE-2022-35292 | 7.8 | Sep 13 | In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnerability known as Unquoted… Affected: 10.0 |
| CVE-2021-33700 | 7.8 | Sep 15 | SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password Affected: 10.0 |
| CVE-2021-27616 | 7.8 | May 11 | Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an attacker to… Affected: 8.82; 9.0; 9.1; 9.2; 9.3; 10.0 |
| CVE-2023-33993 | 7.5 | Aug 8 | B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data Affected: 10.0 |
| CVE-2022-35168 | 7.5 | Jul 12 | Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative Affected: 10.0 |
| CVE-2022-32249 | 7.5 | Jul 12 | Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive… Affected: 10.0 |
| CVE-2018-2458 | 7.5 | Sep 11 | Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted Affected: 9.2; 9.3 |
| CVE-2021-27614 | 7.1 | May 11 | SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be… Affected: 8.82; 9.0; 9.1; 9.2; 9.3; 10.0 |
Showing 12