CVE-2022-35168

The CVE-2022-35168 entry concerns SAP Business One 10.0, where improper input sanitization/cleanup of XML inputs leads to a Denial of Service that can render the system temporarily inoperative. The connected Red Hat and CNVD entries corroborate the DoS impact on SAP Business One v10.0. No concret...

CVE-2022-35168

Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative...

CVE-2022-32247

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker can view or modif...

CVE-2022-32247

CVE-2022-32247 affects SAP NetWeaver Enterprise Portal versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50. A cross-site scripting vulnerability arises from improper sanitization of user inputs during network interactions, allowing an unauthenticated attacker to view or modify information and causi...

CVE-2022-32248

CVE-2022-32248 describes an input validation error in SAP S/4HANA (Manage Checkbooks component) affecting versions 101–106. The issue allows an attacker to insert or edit the value of an existing database field, leading to data integrity impact. The CVSS shows a network attack vector, no authenti...

CVE-2022-32248

Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data...

CVE-2022-31593

SAP Business One client 10.0 is affected by CVE-2022-31593. The vulnerability enables code injection by an attacker with low privileges, allowing injected code to be executed within the application and potentially enabling the attacker to control the application's behavior. The description does n...

CVE-2022-31593

SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2022-31591

CVE-2022-31591 affects SAP BusinessObjects BW Publisher Service versions 420 and 430. The root cause is a search path containing an unquoted element, enabling a local attacker to gain elevated privileges by placing an executable in the service’s path. The Red Hat, CNVD, and CVE records corroborat...

CVE-2022-31591

SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service...

CVE-2022-31597

CVE-2022-31597 affects SAP S/4HANA: S4CORE versions 101–106 and SAPSCORE 127, specifically the application business partner extension for Spain/Slovakia. Root cause: the extension does not perform necessary authorization checks for a low-privileged authenticated user over the network, enabling pr...

CVE-2022-31597

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to...

CVE-2022-28771

SAP Business One License service API (version 10.0) is affected by a vulnerability caused by a missing authentication check. The issue allows an unauthenticated, remote attacker to send malicious HTTP requests over the network, potentially breaking the whole application and making it inaccessible...

CVE-2022-28771

Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests over the network. On successful exploitation, an attacker can break the whole application making it inaccessible...

CVE-2022-29619

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted...

CVE-2022-29619

SAP BusinessObjects Business Intelligence Platform (4.x; v4.2.0 and v4.3.0) contains an authorization flaw where an Administrator can view, edit or modify rights of objects it does not own and that would normally be restricted. Root cause: incorrect access control for object rights, enabling priv...

CVE-2022-31592

CVE-2022-31592 affects SAP Enterprise Extension Defense Forces & Public Security; versions 605, 606, 616, 617, 618, 802, 803, 804, 805, 806 are vulnerable. The root cause is missing authorization checks for an authenticated user over the network, enabling privilege escalation with a limited confi...

CVE-2022-31592

The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 804, 805, 806, does not perform necessary authorization checks for an authenticated user over the network, resulting in escalation of privileges leading to a limited impact on...

CVE-2022-31598

Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity o...

CVE-2022-31598

SAP Business Objects (version 420) is affected by an input-validation issue that allows an authenticated attacker to submit a malicious request via an allowed operation, potentially exposing or modifying data with limited confidentiality/ integrity impact. The connected documents reiterate the sa...