CVE-2022-31593CWE-74

SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application

published July 12, 2022

CVSS
—
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01002 · 62.6th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2022-07-12T20:27Z
EPSS history
Timeline
  • 12 JUL 20:27Z
    SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application
    cvelistv5