Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-0489

DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting (XSS) vulnerability. This issue had a low impact on the confidentiality and integrity of the application with no impact on availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business One (Job Service)

Default version status: unaffected

  • B1_ON_HANA 10.0affected
  • SAP-M-BO 10.0affected

References