SAP Business One
11 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| March 2026 | 3693543 | DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service) | Medium | 6.1 |
| February 2026 | 3679346 | Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files) | Medium | 5.8 |
| November 2025 | 3652901 | Information Disclosure vulnerability in SAP Business One (SLD) | Medium | 5.3 |
| September 2025 | 3642961 | Insecure Storage of Sensitive Information in SAP Business One (SLD) | High | 8.8 |
| August 2025 | 3625403 | Broken Authorization in SAP Business One (SLD) | High | 8.8 |
| March 2025 | 3561045 | Broken Authentication in SAP Business One (Service Layer) | Medium | 6.8 |
| November 2023 | 3355658 | Improper Access Control vulnerability in SAP Business One product installation | Critical | 9.6 |
| October 2023 | 3338380 | Information Disclosure vulnerability in SAP Business One (B1i) | Medium | 4.3 |
| August 2023 | 3358300 | Cross-Site Scripting (XSS) vulnerability in SAP Business One | High | 7.6 |
| August 2023 | 3337797 | SQL Injection vulnerability in SAP Business One B1i Layer | High | 7.1 |
| August 2023 | 3333616 | Security misconfiguration vulnerability in SAP Business One (Service Layer) | Medium | 5.3 |