Sap Business One (Sap Se) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2023-11-14. Vendor: Sap Se.
CVEs of Sap Business One
- CVE-2023-31403 - CVSS 9.6 (critical), 2023-11-14: SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any…
- CVE-2023-39437 - CVSS 7.6 (high), 2023-08-08: SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets it delivered to the…
- CVE-2022-35292 - CVSS 7.8 (high), 2022-09-13: In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnerability…
- CVE-2022-35168 - CVSS 7.5 (high), 2022-07-12: Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system…
- CVE-2022-32249 - CVSS 7.5 (high), 2022-07-12: Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to…
- CVE-2022-31593 - CVSS 8.8 (high), 2022-07-12: SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could…
- CVE-2021-44234 - CVSS 5.5 (medium), 2022-01-14: SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose…
- CVE-2021-42066 - CVSS 4.4 (medium), 2021-12-14: SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker…
- CVE-2021-38179 - CVSS 4.9 (medium), 2021-10-12: Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include…
- CVE-2021-38180 - CVSS 9.8 (critical), 2021-10-12: SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injection) due to improper sanitation during the data…
- CVE-2021-33704 - CVSS 8.8 (high), 2021-09-15: The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to…
- CVE-2021-33700 - CVSS 7.8 (high), 2021-09-15: SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without…
- CVE-2021-33698 - CVSS 9.9 (critical), 2021-09-15: SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format…
- CVE-2021-37532 - CVSS 4.3 (medium), 2021-09-14: SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in…
- CVE-2021-33685 - CVSS 6.5 (medium), 2021-09-14: SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the…
- CVE-2021-33688 - CVSS 4.3 (medium), 2021-09-14: SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework…
- CVE-2021-33686 - CVSS 5.3 (medium), 2021-09-14: Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encrypted sensitive information, but does not…
- CVE-2021-33662 - CVSS 6.7 (medium), 2021-06-09: Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to…
- CVE-2021-27614 - CVSS 7.3 (high), 2021-05-11: SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject…
- CVE-2021-27616 - CVSS 7.8 (high), 2021-05-11: Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA,…
- CVE-2018-2425 - CVSS 8.4 (high), 2018-06-12: Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted.
- CVE-2018-2410 - CVSS 5.4 (medium), 2018-04-10: SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting (XSS) vulnerability.
