Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up
SAP

SAP Business One Service Layer (B1_ON_HANA)

2 Versions 1 CVE

Versions

= 9.2

OTHER 1 CVE

= 9.3

OTHER 1 CVE

Recent CVEs

CVE-2018-2502

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).

UNKNOWN Dec 11, 2018