SAP Business One vulnerabilities
5 known vulnerabilities in SAP Business One from SAP. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
SAP Business One: Incorrect Authorization
SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be execu
- 7.8 High severity
SAP Business One: Unquoted Search Path or Element
In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnerability known as Unquoted Service Path which allows a user to gain SYSTEM privileges. If the service is exploite
- 7.5 High severity
SAP Business one: Improper Restriction of XML External Entity Reference
Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.
- 7.5 High severity
SAP Business one: Exposure of Resource to Wrong Sphere
Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive information (e.g., high privileged account credentials)
- 8.8 High severity
SAP Business One: Improper Neutralization of Special Elements in Output Used by a Downstream Component
SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.