CVE-2022-28771CWE-306

Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests…

published July 12, 2022

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests over the network. On successful exploitation, an attacker can break the whole application making it inaccessible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01169 · 67.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2022-07-12T20:26Z
EPSS history
Timeline
  • 12 JUL 20:26Z
    Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests…
    cvelistv5