CVE-2021-38179

MEDIUM 4.9CVE-2021-38179 · Published 12/10/2021 · updated 17/06/2026

In short

CVE-2021-38179 is a MEDIUM (CVSS 4.9) vulnerability affecting business one (sap).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
business one sap	`= 10.0`	No fix yet

Description

Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials.

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

More vulnerabilities in business one

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

business one

sap

= 10.0

No fix yet

More vulnerabilities in business one

See all →