CVE-2022-31593

SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@sap.com

Published

2022-07-12

Last modified

2024-08-03

Weaknesses

CWE-74

Affected products

• Business One (Sap)
• Sap Business One (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/3191012
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html