Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sap Subscribe
Filtered by product Business One On Hana
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-2502 1 Sap 1 Business One On Hana 2019-01-07 4.3 MEDIUM 6.1 MEDIUM
TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).