CVE-2022-35168

published 2022-07-12

CVE-2022-35168: Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	business_one	—	—
sap_se	sap_business_one	—	—

CWE-611