Skip to contentSap Business One vulnerabilities
- sap business one, sap se business one (b1 client memory dump files) +1 moreInformation Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)CVE-2026-243195.8 Medium
- sap business oneImproper Access Control vulnerability in SAP Business One product installationCVE-2023-314039.6 Critical
- sap business one, sap se business one (b1i) +1 moreInformation Disclosure vulnerability in SAP Business One (B1i)CVE-2023-413654.3 Medium
- sap business oneCross-Site Scripting (XSS) vulnerability in SAP Business OneCVE-2023-394377.6 High
- sap business one, sap se business one (service layer) +1 moreSecurity misconfiguration vulnerability in SAP Business One (Service Layer)CVE-2023-374875.3 Medium
- sap business one, sap se business one (b1i layer) +1 moreSQL Injection vulnerability in SAP Business One B1i LayerCVE-2023-339937.1 High
- sap business oneIn SAP Business One application when a service is created, the executable path contains spaces...CVE-2022-352927.8 High
- sap business oneUnder special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker...CVE-2022-322497.5 High
- sap business oneDue to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker...CVE-2022-351687.5 High
- sap business oneSAP Business One client - version 10.0 allows an attacker with low privileges, to inject code...CVE-2022-315938.8 High
- sap business one license service apiDue to missing authentication check, SAP Business one License service API - version 10.0 allows...CVE-2022-287717.5 High
- sap business oneSAP Business One - version 10.0, extended log stores information that can be of a sensitive...CVE-2021-442345.5 Medium
- sap business oneSAP Business One - version 10.0, allows an admin user to view DB password in plain text over the...CVE-2021-420664.4 Medium
- sap business oneSAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to...CVE-2021-381809.8 Critical
- sap business oneDebug function of Admin UI of SAP Business One Integration is enabled by default. This allows...CVE-2021-381794.9 Medium
- sap business oneThe Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke...CVE-2021-337046.3 Medium
- sap business oneSAP Business One, version - 10.0, allows an attacker with business authorization to upload any...CVE-2021-336989.9 Critical
- sap business oneSAP Business One, version - 10.0, allows a local attacker with access to the victim's browser...CVE-2021-337007.0 High
- sap business oneSAP Business One allows an attacker with business privileges to execute crafted database queries,...CVE-2021-336884.3 Medium
- sap business oneUnder certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get...CVE-2021-336865.3 Medium
- sap business oneSAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system...CVE-2021-336856.5 Medium
- sap business oneSAP Business One version - 10, due to improper input validation, allows an authenticated User to...CVE-2021-375324.3 Medium
- sap business oneUnder certain conditions, the installation of SAP Business One, version - 10.0, discloses...CVE-2021-336626.7 Medium
- sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 moreUnder certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9...CVE-2021-276167.8 High
- sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 moreSAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install...CVE-2021-276147.3 High
- sap business one, sap se business one (backup service) +1 moreUnder certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an...CVE-2020-62394.4 Medium
- sap business one clientUnder certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and...CVE-2019-03533.3 Low
- sap business one, sap se business one mobile android app +1 moreUnder certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker...CVE-2019-02565.5 Medium
- sap business one on hana, business one service layer (b1 on hana) +1 moreTRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site...CVE-2018-25026.1 Medium
- sap business one, business one android application +1 moreSAP Business One Android application, version 1.2, does not verify the certificate properly for...CVE-2018-24605.9 Medium
- sap business oneUnder certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection...CVE-2018-24587.5 High
- sap business oneUnder certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an...CVE-2018-24258.4 High
- sap business oneSAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs,...CVE-2018-24105.4 Medium
- sap business oneSAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE)...CVE-2016-6256Public exploit9.6 Critical
- sap business one 2005-aStack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80...CVE-2009-4988Public exploitEPSS 65.5%10.0 High