CVE-2019-0353

CVE-2019-0353 affects SAP Business One client components B1_ON_HANA and SAP-M-BO prior to versions 9.2 and 9.3. The issue allows an attacker to access information that would normally be restricted. The connected documents confirm the affected product family and versions and the general impact (in...

CVE-2019-0353: Undefined Security Weakness

Under certain conditions SAP Business One client B1ONHANA, SAP-M-BO, before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted...

CVE-2018-2502: Improper Neutralization of Input During Web Page Generation

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST Cross Site Tracing attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer B1ONHANA, versions 9.2, 9.3...