CVE-2026-24319
Undergoing Analysis Undergoing Analysis - In Progress

Sensitive Data Exposure in SAP Business One Memory Dumps

Publication date: 2026-02-10

Last updated on: 2026-02-17

Assigner: SAP SE

Description
In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-10
Last Modified
2026-02-17
Generated
2026-07-06
AI Q&A
2026-02-10
EPSS Evaluated
2026-07-05
NVD
CVE-2026-24319
EUVD
EUVD-2026-6390

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sap business_one 10.0
sap business_one 10.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-316 The product stores sensitive information in cleartext in memory.
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability occurs in SAP Business One where sensitive information is written to the application's memory dump files without any obfuscation. This means that if someone gains access to these memory dump files, they could see sensitive data in plain form.

Because the sensitive information is exposed in this way, an attacker with access to these files could potentially perform unauthorized operations within the SAP Business One environment, such as modifying company data.

Impact Analysis

The vulnerability impacts the confidentiality and integrity of your data within SAP Business One. Specifically, unauthorized individuals who access the memory dump files could view sensitive information and potentially modify company data.

There is no impact on availability, meaning the system's uptime or accessibility is not affected by this vulnerability.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24319. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart