Known Vulnerabilities for Business One by Sap
Listed below are 10 of the newest known vulnerabilities associated with "Business One" by "Sap".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57949 json | ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GE... | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-57339 json | Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions. | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-57328 json | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-57326 json | Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-53647 json | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest `servicea... | Not Provided | 2026-07-07 | 2026-07-07 |
| CVE-2026-53142 json | In the Linux kernel, the following vulnerability has been resolved: drm/xe/display: fix oops in suspend/shutdown without dis... | Not Provided | 2026-06-25 | 2026-07-04 |
| CVE-2026-50280 json | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 and above prior to 5.9.21, the EntriesController::actio... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-47645 json | Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker ... | Not Provided | 2026-06-19 | 2026-06-26 |
| CVE-2026-46976 json | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Suppo... | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2026-46973 json | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite (component: Internal Op... | Not Provided | 2026-06-17 | 2026-06-17 |