CVE-2022-28771

CVE-2022-28771

Vendor Sap Se
Product SAP Business One License service API
Weakness CWE-306 · Missing auth
Published July 12, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests over the network. On successful exploitation, an attacker can break the whole application making it inaccessible.

Key dates

02Disclosure timeline

July 12, 2022 CVE published
August 3, 2024 Record updated