SB
Product
SAP Business one
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 11Low 0
Watch
Add SAP Business one to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31593 | 8.8 | Jul 12 | SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application Affected: 10.0 |
| CVE-2021-33704 | 8.8 | Sep 15 | The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users Affected: < 10.0 |
| CVE-2021-33698 | 8.8 | Sep 15 | SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation Affected: < 10.0 |
| CVE-2023-31403 | 8.0 | Nov 14 | Improper Access Control vulnerability in SAP Business One product installation Affected: 10.0 |
| CVE-2022-35292 | 7.8 | Sep 13 | In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnerability known as Unquoted… Affected: 10.0 |
| CVE-2021-33700 | 7.8 | Sep 15 | SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password Affected: < 10.0 |
| CVE-2022-32249 | 7.5 | Jul 12 | Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive… Affected: 10.0 |
| CVE-2022-35168 | 7.5 | Jul 12 | Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative Affected: 10.0 |
Showing 8