Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SAP Business One — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in SAP Business One, with AI-generated Chinese analysis, references, and POCs.

This page documents common vulnerability classifications associated with SAP Business One, a vendor-owned enterprise resource planning solution. It aggregates security weaknesses identified in the software, focusing on critical flaws that may impact data integrity, confidentiality, or system availability. The collection covers vulnerabilities reported from 2010 through 2024, providing a historical view of the product's security posture over more than a decade. By consolidating these entries, the resource allows users to track vendor advisories from SAP, helping stakeholders understand the remediation landscape and patch management timelines for this specific platform. Readers can utilize this data to understand common weakness classes affecting ERP applications, such as injection flaws, privilege escalation, or cross-site scripting issues that have been historically relevant to SAP Business One. Furthermore, users can look up a product's vulnerability history to assess long-term risk trends, compare severity levels across different releases, and identify recurring patterns in security defects. This aggregation serves as a neutral reference for security analysts, IT administrators, and compliance officers who need to evaluate the current state of SAP Business One against industry standards. It does not offer mitigation advice or installation guidance but rather focuses on factual reporting of disclosed weaknesses. The information is intended to support informed decision-making regarding system updates, audit preparation, and risk assessment processes without endorsing any specific vendor response or security tool.

Vendor: SAP SE

CVE IDTitleCVSSSeverityPublished
CVE-2023-31403 Improper Access Control vulnerability in SAP Business One product installation CWE-863 9.6 Critical2023-11-14
CVE-2023-39437 Cross-Site Scripting (XSS) vulnerability in SAP Business One CWE-79 7.6 High2023-08-08
CVE-2022-35292 SAP Business One 代码问题漏洞 CWE-428 7.3 -2022-09-13
CVE-2022-32249 SAP S/4HANA 和 SAP Business One 安全漏洞 CWE-668 7.5 -2022-07-12
CVE-2022-35168 SAP Business One 代码问题漏洞 CWE-611 7.5 -2022-07-12
CVE-2022-31593 SAP Business One client 注入漏洞 CWE-74 8.8 -2022-07-12
CVE-2021-44234 SAP Business One 日志信息泄露漏洞 CWE-532 5.5 -2022-01-14
CVE-2021-42066 SAP Business One 安全漏洞 CWE-312 4.4 -2021-12-14
CVE-2021-38180 SAP Business One 安全漏洞 CWE-1236 8.8 -2021-10-12
CVE-2021-38179 SAP Business One 安全漏洞 4.9 -2021-10-12
CVE-2021-33704 SAP Business One 安全漏洞 CWE-862 8.8 -2021-09-15
CVE-2021-33698 SAP Business One 代码问题漏洞 CWE-434 8.1 -2021-09-15
CVE-2021-33700 SAP Business One 授权问题漏洞 CWE-288 7.8 -2021-09-15
CVE-2021-33688 SAP Business One SQL注入漏洞 4.3 -2021-09-14
CVE-2021-33686 SAP Business One 信息泄露漏洞 5.3 -2021-09-14
CVE-2021-33685 SAP Business One 路径遍历漏洞 6.5 -2021-09-14
CVE-2021-37532 SAP Business One 路径遍历漏洞 CWE-22 4.3 -2021-09-14
CVE-2021-33662 SAP Business One 信息泄露漏洞 5.5 -2021-06-09
CVE-2018-2458 SAP Business One 信息泄露漏洞 6.5 -2018-09-11
CVE-2018-2425 SAP Business One 信息泄露漏洞 5.5 -2018-06-12
CVE-2018-2410 SAP Business One 跨站脚本漏洞 5.4 -2018-04-10

All 21 known CVE vulnerabilities affecting SAP Business One with full Chinese analysis, references, and POCs where available.