Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2023-39437

Cross-Site Scripting (XSS) vulnerability in SAP Business One

Description

SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets it delivered to the client, resulting to Cross-site scripting. This could lead to harmful action affecting the Confidentiality, Integrity and Availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business One

Default version status: unaffected

  • 10.0affected

References