CVE-2023-33993: SQL Injection vulnerability in SAP Business One B1i Layer
B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SAP Business One vulnerability?
The vulnerability ID for this SAP Business One vulnerability is CVE-2023-33993.
What is the impact severity of CVE-2023-33993?
The impact severity of CVE-2023-33993 is high, with a severity value of 7.1.
Which version of SAP Business One is affected by CVE-2023-33993?
The version 10.0 of SAP Business One is affected by CVE-2023-33993.
How can an attacker exploit CVE-2023-33993?
An attacker with deep knowledge can exploit CVE-2023-33993 by sending crafted queries over the network to read or modify the SQL data of the SAP Business One application.
Are there any references for CVE-2023-33993?
Yes, you can find references for CVE-2023-33993 at the following links: [Link to SAP Note 3337797](https://me.sap.com/notes/3337797) and [Link to SAP document](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).