CVE-2022-31593: High severity sap business one on hana vulnerability
SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-31593?
CVE-2022-31593 is a vulnerability in SAP Business One client version 10.0 that allows an attacker with low privileges to inject code that can be executed by the application, enabling them to control its behavior.
How severe is CVE-2022-31593?
CVE-2022-31593 has a severity rating of 8.8 (high).
Which versions of SAP Business One client are affected by CVE-2022-31593?
SAP Business One client version 10.0 is affected by CVE-2022-31593.
How can an attacker exploit CVE-2022-31593?
An attacker with low privileges can exploit CVE-2022-31593 by injecting code that can be executed by the SAP Business One client application.
Are there any references regarding CVE-2022-31593?
Yes, you can find more information about CVE-2022-31593 at the following references: [Support Note](https://launchpad.support.sap.com/#/notes/3191012) and [SAP Document](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).