[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnfthyvRPs6hMNde-kMmrKI3UUFveQl8OP1Sdnoy4Rsw":3,"g5a-ex:sap\u002Fbusiness_one@*":132,"g5a-family:sap\u002Fbusiness_one":134},{"success":4,"data":5},true,{"product":6,"versions":39,"topVulnerabilitiesByEpss":49,"kevVulnerabilities":109,"seoMetadata":110,"meta":129},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":38},"sap","business_one",9,30,0,"2023-11-14",[14,18,21,23,25,28,30,32,35],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0",24,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.2",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"1.2.12",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"1.2.3",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"8.82",2,{"version":29,"cve_count":27,"kev_count":11,"has_kev":17},"9.0",{"version":31,"cve_count":27,"kev_count":11,"has_kev":17},"9.1",{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},"9.2",5,{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"9.3",6,"Business One by Sap is a technology product with 9 tracked versions and 30 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[40,41,42,43,44,45,46,47,48],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":27,"kev_count":11,"has_kev":17},{"version":31,"cve_count":27,"kev_count":11,"has_kev":17},{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},[50,58,65,72,78,85,90,94,100,104],{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":17,"epssScore":57},"CVE-2016-6256","SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator\u002Fexec\u002Fsoap\u002FvP.001sap0003.in_WCSX\u002Fcom.sap.b1i.vplatform.runtime\u002FINB_WS_CALL_SYNC_XPT\u002FINB_WS_CALL_SYNC_XPT.ipo\u002Fproc, aka SAP Security Note 2378065.","2017-05-26",9.6,"v3.0","Critical",0.0788,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":63,"severity":56,"isKev":17,"epssScore":64},"CVE-2021-38180","SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injection) due to improper sanitation during the data export. An attacker could thereby execute arbitrary commands on the victim's computer but only if the victim allows to execute macros while opening the file and the security settings of Excel allow for command execution.\n\n","2021-10-12",9.8,"v3.1",0.02053,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":55,"severity":70,"isKev":17,"epssScore":71},"CVE-2018-2458","Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted.","2018-09-11",7.5,"High",0.01728,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":63,"severity":70,"isKev":17,"epssScore":77},"CVE-2021-33698","SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation.","2021-09-15",8.8,0.01099,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":63,"severity":83,"isKev":17,"epssScore":84},"CVE-2021-33685","SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows access to high level sensitive data","2021-09-14",6.5,"Medium",0.01029,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":76,"cvssVersion":63,"severity":70,"isKev":17,"epssScore":89},"CVE-2022-31593","SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.","2022-07-12",0.01002,{"cveId":91,"description":92,"publishedDate":88,"cvssScore":69,"cvssVersion":63,"severity":70,"isKev":17,"epssScore":93},"CVE-2022-32249","Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive information (e.g., high privileged account credentials)",0.00926,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":55,"severity":83,"isKev":17,"epssScore":99},"CVE-2018-2410","SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting (XSS) vulnerability.","2018-04-10",5.4,0.00924,{"cveId":101,"description":102,"publishedDate":88,"cvssScore":69,"cvssVersion":63,"severity":70,"isKev":17,"epssScore":103},"CVE-2022-35168","Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.",0.00873,{"cveId":105,"description":106,"publishedDate":81,"cvssScore":107,"cvssVersion":63,"severity":83,"isKev":17,"epssScore":108},"CVE-2021-37532","SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.",4.3,0.00811,[],{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Business One by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Business One by Sap covering 9 versions with 30 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Business One vulnerabilities, Business One security, Business One CVE, Sap Business One, Business One threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":115,"@type":116,"name":117,"description":112,"url":118,"manufacturer":119,"applicationCategory":123,"softwareVersion":124,"mainEntity":125},"https:\u002F\u002Fschema.org","SoftwareApplication","Business One","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fbusiness_one",{"@type":120,"name":121,"url":122},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","9 versions tracked",{"@type":126,"name":127,"description":128,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Business One Security Vulnerabilities","Security vulnerabilities affecting Business One by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":130,"apiVersion":131},"2026-10-18T22:16:53.521Z","3.0",{"rows":133,"total":11,"capped":17,"failed":11},[],[135,137,139,141],{"product":136,"cves":20},"business_one_2005-a",{"product":138,"cves":20},"business_one_client",{"product":140,"cves":20},"business_one_license_service_api",{"product":142,"cves":20},"business_one_on_hana"]