Lucene search

K
nvd[email protected]NVD:CVE-2023-33993
HistoryAug 08, 2023 - 1:15 a.m.

CVE-2023-33993

2023-08-0801:15:15
CWE-89
web.nvd.nist.gov
cve-2023-33993
sap business one
sql injection
authenticated user
network attack
data tampering
confidentiality breach
integrity breach
availability impact

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

19.9%

B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the application.

Affected configurations

NVD
Node
sapbusiness_oneMatch10.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

19.9%

Related for NVD:CVE-2023-33993