CVE-2021-37532
- State
- Published
- Severity
- 4.3 Medium
- Published
- Sep 14, 2021
- Updated
- Aug 4, 2024
- Reserved
- Jul 26, 2021
Description
SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | sap |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
SAP Business OneSAP SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.