CVE-2022-35168CWE-611

CVE-2022-35168: vulnerability in SAP Business one

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.
Related CVEs — SAP Business one

In the same product, most dangerous first.