VDB

CVE-2022-35168

CVE-2022-35168 PUBLISHED CVSS 5 MEDIUM

Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.

EPSS 0.35% · 57.7th percentile

Risk Scores

CVSS 2.0
5
EPSS Score
0.35%
57.7th percentile

Affected Products

VendorProductVersions
SAP SESAP Business one10.0
sapbusiness_one10.0

Timeline

  • Jul 12, 2022 CVE Published
  • Jul 13, 2022 EPSS Score
  • Aug 30, 2022 EPSS Score
  • Oct 16, 2022 EPSS Score
  • Dec 2, 2022 EPSS Score
  • Jan 18, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 23, 2023 EPSS Score
  • Jun 9, 2023 EPSS Score
  • Jul 26, 2023 EPSS Score
  • Sep 11, 2023 EPSS Score
  • Oct 28, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›