CVE-2022-35168: XEE
Published Jul 12, 2022
·Updated
Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.
Affected Software
1 affected component
SAP Business One=10.0
Event History
Jul 12, 2022
CVE Published
via MITRE·08:27 PM
Data Sourced
via MITRE·08:27 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this SAP Business One vulnerability?
The vulnerability ID of this SAP Business One vulnerability is CVE-2022-35168.
2
What is the severity of CVE-2022-35168?
The severity of CVE-2022-35168 is high with a CVSS score of 7.5.
3
How does CVE-2022-35168 affect SAP Business One?
CVE-2022-35168 affects SAP Business One version 10.0.
4
What is the impact of CVE-2022-35168?
CVE-2022-35168 allows an attacker to perform a denial-of-service attack, rendering the system temporarily inoperative.
5
Where can I find more information about CVE-2022-35168?
You can find more information about CVE-2022-35168 at the following references: [1](https://launchpad.support.sap.com/#/notes/3211203), [2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).