Medium severity4.9NVD Advisory· Published Oct 12, 2021· Updated Jun 17, 2026
CVE-2021-38179
CVE-2021-38179
Description
Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials.
Affected products
3- cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*
- SAP SE/SAP Business Onev5Range: < 10.0
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.