What is CVE-2021-37532?

CVE-2021-37532 is a medium-severity vulnerability in SAP Business One, classified under Path Traversal. CVSS score: 4.3/10. Published 2021-09-14.

How severe is CVE-2021-37532?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Path Traversal in SAP Business One

CVE-2021-37532

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.008 (53.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Sap Business_one — versions 10.0
Sap Se Business One — versions < 10.0

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cna@sap.com (x_refsource_MISC, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-37532?: CVE-2021-37532 is a medium-severity vulnerability in SAP Business One, classified under Path Traversal. CVSS score: 4.3/10. Published 2021-09-14.
How severe is CVE-2021-37532?: Medium severity. CVSS v3 base score is 4.3 out of 10.