SAP Business One 10.0

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability.

Published: 2026-02-10T03:03:33.788Z
Updated: 2026-02-26T15:04:13.311Z

SAP Business One (B1i) - version 10.0, allows an authorized attacker to retrieve the details stack trace of the fault message to conduct the XXE injection, which will lead to information disclosure. After successful exploitation, an attacker can cause limited impact on the confidentiality and no impact to the integrity and availability.

Published: 2023-10-10T01:35:57.645Z
Updated: 2024-09-26T18:25:09.283Z

SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets it delivered to the client, resulting to Cross-site scripting. This could lead to harmful action affecting the Confidentiality, Integrity and Availability of the application.

Published: 2023-08-08T00:48:38.640Z
Updated: 2024-10-11T22:21:09.655Z

SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application

Published: 2023-08-08T00:42:16.140Z
Updated: 2024-10-10T19:12:11.589Z

B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the application.

Published: 2023-08-08T00:35:51.653Z
Updated: 2024-10-10T19:08:03.270Z