CVE-2023-37487CWE-497

Security misconfiguration vulnerability in SAP Business One (Service Layer)

Medium · published August 8, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
41.9
In the wild
Unconfirmed
What it is

SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00500 · 41.9th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2023-08-08T00:42Z
EPSS history
Timeline
  • 08 AUG 00:42Z
    Security misconfiguration vulnerability in SAP Business One (Service Layer)
    cvelistv5