Advisories · Technology

SAP_SE SAP Business One.

Every CVE that names SAP_SE SAP Business One among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-31403 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper Access Control vulnerability in SAP Business One product installation
- SAP_SE SAP Business One
- Broken access control
Not analysed yet 14 Nov 2023
CVE-2023-39437 CVE record

CVSS 7.6 High

Cross-Site Scripting (XSS) vulnerability in SAP Business One
- SAP_SE SAP Business One
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2022-35292 CVE record

Unquoted search path in SAP SE SAP Business One
- SAP SE SAP Business One
- CWE-428
Not analysed yet 13 Sept 2022
CVE-2022-32249 CVE record

Resource exposure in SAP SE SAP Business one
- SAP SE SAP Business one
- Information disclosure
Not analysed yet 12 Jul 2022
CVE-2022-35168 CVE record

XML external entity injection in SAP SE SAP Business one
- SAP SE SAP Business one
- XML external entities (XXE)
Not analysed yet 12 Jul 2022
CVE-2022-31593 CVE record

Injection in SAP SE SAP Business One
- SAP SE SAP Business One
- Other injection
Not analysed yet 12 Jul 2022
CVE-2021-44234 CVE record

Sensitive information in log files in SAP SE SAP Business One
- SAP SE SAP Business One
- Information disclosure
Not analysed yet 14 Jan 2022
CVE-2021-42066 CVE record

Cleartext storage of sensitive information in SAP SE SAP Business One
- SAP SE SAP Business One
- Information disclosure
Not analysed yet 14 Dec 2021
CVE-2021-38180 CVE record

CSV injection in SAP SE SAP Business One
- SAP SE SAP Business One
- Other injection
Not analysed yet 12 Oct 2021
CVE-2021-38179 CVE record

Debug function of Admin UI of SAP Business One Integration is enabled by default.
- SAP SE SAP Business One
Not analysed yet 12 Oct 2021
CVE-2021-33704 CVE record

CVSS 6.3 Medium

Missing authorization in SAP SE SAP Business One
- SAP SE SAP Business One
- Broken access control
Not analysed yet 15 Sept 2021
CVE-2021-33698 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Unrestricted file upload in SAP SE SAP Business One
- SAP SE SAP Business One
- Unrestricted file upload
Not analysed yet 15 Sept 2021
CVE-2021-33700 CVE record

CVSS 7.0 High

Authentication bypass in SAP SE SAP Business One
- SAP SE SAP Business One
- Authentication bypass
Not analysed yet 15 Sept 2021
CVE-2021-33688 CVE record

SAP SE SAP Business One: SAP Business One allows an attacker with business privileges to execute crafted database…
- SAP SE SAP Business One
Not analysed yet 14 Sept 2021
CVE-2021-33686 CVE record

CVSS 5.3 Medium

SAP SE SAP Business One: Under certain conditions, SAP Business One version - 10.0…
- SAP SE SAP Business One
Not analysed yet 14 Sept 2021
CVE-2021-33685 CVE record

CVSS 6.5 Medium

SAP SE SAP Business One: SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file…
- SAP SE SAP Business One
Not analysed yet 14 Sept 2021
CVE-2021-37532 CVE record

CVSS 4.3 Medium

Path traversal in SAP SE SAP Business One
- SAP SE SAP Business One
- Path traversal
Not analysed yet 14 Sept 2021
CVE-2021-33662 CVE record

CVSS 6.7 Medium

SAP SE SAP Business One: Under certain conditions, the installation of SAP Business One, version - 10.0…
- SAP SE SAP Business One
Not analysed yet 9 Jun 2021
CVE-2018-2425 CVE record

CVSS 8.4 High

SAP SE SAP Business One: Under certain conditions, SAP Business One, 9.2, 9.3…
- SAP SE SAP Business One
Not analysed yet 12 Jun 2018
CVE-2018-2410 CVE record

CVSS 5.4 Medium

SAP SE SAP Business One: SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled…
- SAP SE SAP Business One
Not analysed yet 10 Apr 2018