CVE-2023-37487
Security misconfiguration vulnerability in SAP Business One (Service Layer)
- State
- Published
- Severity
- 5.3 Medium
- Published
- Aug 8, 2023
- Updated
- Oct 10, 2024
- Reserved
- Jul 6, 2023
Description
SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N | sap |
Weaknesses
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
Affected Products
| Product | Versions |
|---|---|
SAP Business One (Service Layer)SAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.