CVE-2023-37487: Security misconfiguration vulnerability in SAP Business One (Service Layer)
SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37487?
The severity of CVE-2023-37487 is medium with a severity value of 5.3.
How can an attacker exploit CVE-2023-37487?
An authenticated attacker with deep knowledge can perform certain operations to access unintended data over the network, which could lead to a high impact on confidentiality.
What is the impact of CVE-2023-37487 on integrity and availability?
CVE-2023-37487 has no impact on integrity and availability of the application.
How can I mitigate the vulnerability in SAP Business One (Service Layer) version 10.0?
To mitigate the vulnerability, it is recommended to update the SAP Business One (Service Layer) to the latest version and apply any relevant patches provided by SAP.
Where can I find more information about CVE-2023-37487?
You can find more information about CVE-2023-37487 in the SAP Security Notes and SAP documentation provided in the references.