CVE-2021-37532CWE-22

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the…

Medium · published September 14, 2021

CVSS v3.0
4.3
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00811 · 56.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-09-14T11:15Z
EPSS history
Timeline
  • 14 SEP 11:15Z
    SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the…
    cvelistv5