Medium severity4.3NVD Advisory· Published Sep 14, 2021· Updated Jun 17, 2026
CVE-2021-37532
CVE-2021-37532
Description
SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.
Affected products
3cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*
- (no CPE)range: <10
- SAP SE/SAP Business Onev5Range: < 10.0
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.