Medium severity4.3NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026
CVE-2023-41365
CVE-2023-41365
Description
SAP Business One (B1i) - version 10.0, allows an authorized attacker to retrieve the details stack trace of the fault message to conduct the XXE injection, which will lead to information disclosure. After successful exploitation, an attacker can cause limited impact on the confidentiality and no impact to the integrity and availability.
Affected products
3cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*
- (no CPE)range: 10.0
- Range: 10.0
Patches
Vulnerability mechanics
References
2- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory
- me.sap.com/notes/3338380nvdPermissions Required
News mentions
0No linked articles in our index yet.