Riskcovery

CVE-2022-28771

State
Published
Severity
Not scored
Published
Jul 12, 2022
Updated
Aug 3, 2024
Reserved
Apr 6, 2022

Read the record on cve.org

Description

Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests over the network. On successful exploitation, an attacker can break the whole application making it inaccessible.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
SAP Business One License service APISAP SE
  • 10.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.