CVE-2022-32249: High severity sap business one on hana vulnerability
Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit?s data volume to gain access to highly sensitive information (e.g., high privileged account credentials)
Other sources
Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive information (e.g., high privileged account credentials)
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-32249?
The severity of CVE-2022-32249 is high.
How can an attacker exploit CVE-2022-32249?
An attacker can exploit CVE-2022-32249 by gaining access to highly sensitive information using HANA cockpit's data volume.
Which version of SAP Business One is affected by CVE-2022-32249?
SAP Business One version 10.0 is affected by CVE-2022-32249.
Is there a fix available for CVE-2022-32249?
Yes, a fix is available. Please refer to the SAP support documents provided for more information.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-32249?
The CWE ID for CVE-2022-32249 is 668.