CVE-2023-33993: SQL Injection vulnerability in SAP Business One B1i Layer
First published: Tue Aug 08 2023(Updated: )
B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the application.
Credit: cna@sap.com cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Business One | =10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SAP Business One vulnerability?
The vulnerability ID for this SAP Business One vulnerability is CVE-2023-33993.
What is the impact severity of CVE-2023-33993?
The impact severity of CVE-2023-33993 is high, with a severity value of 7.1.
Which version of SAP Business One is affected by CVE-2023-33993?
The version 10.0 of SAP Business One is affected by CVE-2023-33993.
How can an attacker exploit CVE-2023-33993?
An attacker with deep knowledge can exploit CVE-2023-33993 by sending crafted queries over the network to read or modify the SQL data of the SAP Business One application.
Are there any references for CVE-2023-33993?
Yes, you can find references for CVE-2023-33993 at the following links: [Link to SAP Note 3337797](https://me.sap.com/notes/3337797) and [Link to SAP document](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).
- collector/nvd-index
- collector/nvd-api
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/title
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/sap
- canonical/sap business one
- version/sap business one/10.0