CVE-2021-37532
Last modified
CVE-2021-37532 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.. EPSS estimates a 0.78% chance of exploitation in the next 30 days.
Description
SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Business One | 10.0 |
References
- https://launchpad.support.sap.com/#/notes/3075546Permissions Required
- https://launchpad.support.sap.com/#/notes/3075546Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-37532?
How severe is CVE-2021-37532?
How do I fix CVE-2021-37532?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-37522SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 all…9.8
- CVE-2021-37524Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26…6.1
- CVE-2021-37529A double-free vulnerability exists in fig2dev through 3.28a …5.5
- CVE-2021-3753A race problem was seen in the vt_k_ioctl in drivers/tty/vt/…4.7
- CVE-2021-37530A denial of service vulnerabiity exists in fig2dev through 3…5.5
- CVE-2021-37531SAP NetWeaver Knowledge Management XML Forms versions - 7.10…8.8
- CVE-2021-37533Prior to Apache Commons Net 3.9.0, Net's FTP client trusts t…6.5
- CVE-2021-37534app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Store…5.4
- CVE-2021-37535SAP NetWeaver Application Server Java (JMS Connector Service…9.8
- CVE-2021-37538Multiple SQL injection vulnerabilities in SmartDataSoft Smar…9.8
- CVE-2021-37539Zoho ManageEngine ADManager Plus before 7111 is vulnerable t…9.8
- CVE-2021-3754A flaw was found in keycloak where an attacker is able to re…5.3
Are you affected by CVE-2021-37532?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST