VULNERABILITY INTELLIGENCE

CVE-2023-37487

CVSS score5.3 MEDIUM
EPSS probability0.50%
CISA KEVNot currently listed
Published2023-08-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application

Weakness classification

  • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Primary references