CVE-2022-35168: SAP Business One

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.

Affected products

• SAP Business One: version 10.0 only

Published 2022-07-12. Last modified 2026-06-17.