CVE Explorer

CVE-2026-24319

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:642b8b29d8d224731c5873b9c9075c3202ecc582542b8b62fe2755217cece44b

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"SAP Business One (B1 Client Memory Dump Files)","vendor":"SAP_SE","versions":[{"status":"affected","version":"B1_ON_HANA 10.0"},{"status":"affected","version":"SAP-M-BO 10.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:f1a98cbb1d8fb4ec6c65c0523442b8baefac0d82a7154cda997dda4508544d05 · sha256:011083df250469a0… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:f1a98cbb1d8fb4ec6c65c0523442b8baefac0d82a7154cda997dda4508544d05 · sha256:011083df250469a0… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-316","description":"CWE-316: Cleartext Storage of Sensitive Information in Memory","lang":"eng","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:f1a98cbb1d8fb4ec6c65c0523442b8baefac0d82a7154cda997dda4508544d05 · sha256:011083df250469a0… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"url":"https://me.sap.com/notes/3679346"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f1a98cbb1d8fb4ec6c65c0523442b8baefac0d82a7154cda997dda4508544d05 · sha256:011083df250469a0… · /containers/cna/references/0

{"url":"https://url.sap/sapsecuritypatchday"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f1a98cbb1d8fb4ec6c65c0523442b8baefac0d82a7154cda997dda4508544d05 · sha256:011083df250469a0… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer