SAP Business One Service Layer (B1 ON Hana) vulnerabilities

1 vulnerability

Known vulnerabilities in SAP Business One Service Layer (B1 ON Hana), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-2502sapbusiness_one_on_hana+1
EPSS score
1.34%
TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).