CVE-2023-41365: Information Disclosure vulnerability in SAP Business One (B1i)
SAP Business One (B1i) - version 10.0, allows an authorized attacker to retrieve the details stack trace of the fault message to conduct the XXE injection, which will lead to information disclosure. After successful exploitation, an attacker can cause limited impact on the confidentiality and no impact to the integrity and availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-41365?
The severity of CVE-2023-41365 is medium with a severity value of 4.3.
How does CVE-2023-41365 affect SAP Business One?
CVE-2023-41365 allows an authorized attacker to retrieve the details stack trace of the fault message to conduct the XXE injection, which can lead to information disclosure.
What is the impact of CVE-2023-41365?
The successful exploitation of CVE-2023-41365 can cause limited impact on the confidentiality but no impact on integrity and availability.
How can I fix CVE-2023-41365?
To fix CVE-2023-41365, it is recommended to apply the necessary security patches and updates provided by SAP.
Where can I find more information about CVE-2023-41365?
More information about CVE-2023-41365 can be found in the SAP Security Note 3338380 and the SAP document provided.