CVE-2023-33993CWE-89

SQL Injection vulnerability in SAP Business One B1i Layer

High · published August 8, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
46.7
In the wild
Unconfirmed
What it is

B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the application.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00576 · 46.7th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2023-08-08T00:35Z
EPSS history
Timeline
  • 08 AUG 00:35Z
    SQL Injection vulnerability in SAP Business One B1i Layer
    cvelistv5