Skip to contentSap Se Business One vulnerabilities
- sap se business one (job service)DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)CVE-2026-04896.1 Medium
- sap business one, sap se business one (b1 client memory dump files) +1 moreInformation Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)CVE-2026-243195.8 Medium
- sap se business one (sld)Information Disclosure vulnerability in SAP Business One (SLD)CVE-2025-428975.3 Medium
- sap se business one (sld)Insecure Storage of Sensitive Information in SAP Business One (SLD)CVE-2025-429338.8 High
- sap se business one (sld)Broken Authorization in SAP Business One (SLD)CVE-2025-429518.8 High
- sap se business one integration frameworkSecurity misconfiguration vulnerability in SAP Business One Integration FrameworkCVE-2025-429985.3 Medium
- sap se business one (service layer)Broken Authentication in SAP Business One (Service Layer)CVE-2025-266586.8 Medium
- sap business oneImproper Access Control vulnerability in SAP Business One product installationCVE-2023-314039.6 Critical
- sap business one, sap se business one (b1i) +1 moreInformation Disclosure vulnerability in SAP Business One (B1i)CVE-2023-413654.3 Medium
- sap business oneCross-Site Scripting (XSS) vulnerability in SAP Business OneCVE-2023-394377.6 High
- sap business one, sap se business one (service layer) +1 moreSecurity misconfiguration vulnerability in SAP Business One (Service Layer)CVE-2023-374875.3 Medium
- sap business one, sap se business one (b1i layer) +1 moreSQL Injection vulnerability in SAP Business One B1i LayerCVE-2023-339937.1 High
- sap business oneIn SAP Business One application when a service is created, the executable path contains spaces...CVE-2022-352927.8 High
- sap business oneUnder special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker...CVE-2022-322497.5 High
- sap business oneDue to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker...CVE-2022-351687.5 High
- sap business oneSAP Business One client - version 10.0 allows an attacker with low privileges, to inject code...CVE-2022-315938.8 High
- sap business oneSAP Business One - version 10.0, extended log stores information that can be of a sensitive...CVE-2021-442345.5 Medium
- sap business oneSAP Business One - version 10.0, allows an admin user to view DB password in plain text over the...CVE-2021-420664.4 Medium
- sap business oneSAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to...CVE-2021-381809.8 Critical
- sap business oneDebug function of Admin UI of SAP Business One Integration is enabled by default. This allows...CVE-2021-381794.9 Medium
- sap business oneThe Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke...CVE-2021-337046.3 Medium
- sap business oneSAP Business One, version - 10.0, allows an attacker with business authorization to upload any...CVE-2021-336989.9 Critical
- sap business oneSAP Business One, version - 10.0, allows a local attacker with access to the victim's browser...CVE-2021-337007.0 High
- sap business oneSAP Business One allows an attacker with business privileges to execute crafted database queries,...CVE-2021-336884.3 Medium
- sap business oneUnder certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get...CVE-2021-336865.3 Medium
- sap business oneSAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system...CVE-2021-336856.5 Medium
- sap business oneSAP Business One version - 10, due to improper input validation, allows an authenticated User to...CVE-2021-375324.3 Medium
- sap business oneUnder certain conditions, the installation of SAP Business One, version - 10.0, discloses...CVE-2021-336626.7 Medium
- sap business oneUnder certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection...CVE-2018-24587.5 High
- sap business oneUnder certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an...CVE-2018-24258.4 High
- sap business oneSAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs,...CVE-2018-24105.4 Medium