CVE-2021-37532

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-09-14 · updated 2026-06-17
Weakness: CWE-22

Description

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.

Affected products

SAP SE SAP Business One: 10.0

References

https://launchpad.support.sap.com/#/notes/3075546
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
https://launchpad.support.sap.com/#/notes/3075546
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405

Get alerted when CVE-2021-37532 or the next vulnerability affects your stack