40 matches found
Code injection
SAP Business One Service Layer - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application...
CVE-2023-37487 Security misconfiguration vulnerability in SAP Business One (Service Layer)
SAP Business One Service Layer - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application...
CVE-2023-37487 Security misconfiguration vulnerability in SAP Business One (Service Layer)
SAP Business One Service Layer - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application...
CVE-2023-37487
CVE-2023-37487 affects SAP Business One (Service Layer) version 10.0. An authenticated attacker with deep knowledge can access unintended data over the network, impacting confidentiality (C:H, I:N, A:N). Base CVSS 5.3 (MEDIUM). No remediation details are provided in the connected documents; no ex...
PT-2023-4249 · Sap · Sap Business One
Name of the Vulnerable Software and Affected Versions: SAP Business One Service Layer version 10.0 Description: The issue is related to insufficient protection of service data in the SAP Business One system, which can be exploited by a remote attacker to disclose protected information. An...
SAP Business One Information Disclosure Vulnerability
SAP Business One is a set of enterprise management software from SAP. The software includes functionality for financial management, operations management, and human resource management. An information disclosure vulnerability exists in SAP Business One Service Layer version 10.0 that originates...
CVE-2021-33704
The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users. For an attacker to discover the vulnerable function, no in-depth system knowledge is required. Once exploited via Network stack...
Authorization
The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users. For an attacker to discover the vulnerable function, no in-depth system knowledge is required. Once exploited via Network stack...
CVE-2021-33704
The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users. For an attacker to discover the vulnerable function, no in-depth system knowledge is required. Once exploited via Network stack...
CVE-2021-33704
The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users. For an attacker to discover the vulnerable function, no in-depth system knowledge is required. Once exploited via Network stack...
CVE-2018-2502
TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST Cross Site Tracing attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer B1ONHANA, versions 9.2, 9.3...
CVE-2018-2502
CVE-2018-2502 affects SAP Business One Service Layer (B1_ON_HANA) with TRACE method enabled, enabling potential Cross Site Tracing (XST) when frontend applications expose an XSS vulnerability. The connected documents specify the vulnerable component as SAP Business One Service Layer and reference...
Cross site scripting
TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST Cross Site Tracing attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer B1ONHANA, versions 9.2, 9.3...
CVE-2018-2502
TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST Cross Site Tracing attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer B1ONHANA, versions 9.2, 9.3...
CVE-2018-2502
TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST Cross Site Tracing attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer B1ONHANA, versions 9.2, 9.3...
[SECURITY] Fedora 19 Update: rubygem-actionmailer-3.2.13-2.fc19
Makes it trivial to test and deliver emails sent from a single service laye r...
[SECURITY] Fedora 16 Update: rubygem-actionmailer-3.0.10-1.fc16
Makes it trivial to test and deliver emails sent from a single service laye r...
[SECURITY] Fedora 11 Update: rubygem-actionmailer-2.3.2-3.fc11
Makes it trivial to test and deliver emails sent from a single service laye r...
Fedora Update for rubygem-actionmailer FEDORA-2008-8322
Check for the Version of rubygem-actionmailer OpenVAS Vulnerability Test Fedora Update for rubygem-actionmailer FEDORA-2008-8322 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...