CVE-2023-37487

MediumCVSS 5.3

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

SAP Business One (Service Layer) version 10.0 allows an authenticated attacker with deep knowledge to perform certain operations to access unintended data over the network.

Risk Assessment

This could lead to a high impact on confidentiality, with no impact on the integrity and availability of the application.

Recommendation

It is recommended to monitor and restrict access to the Service Layer and conduct an audit of user permissions.

Original NVD description (English source)

SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application