Description

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting (XSS) vulnerability. This issue had a low impact on the confidentiality and integrity of the application with no impact on availability.

INFO

Published Date :

2026-03-10T00:17:01.649Z

Last Modified :

2026-03-10T00:17:01.649Z

Source :

sap
AFFECTED PRODUCTS

The following products are affected by CVE-2026-0489 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-0489.

URL Resource
https://me.sap.com/notes/3693543 cve-icon
https://url.sap/sapsecuritypatchday cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact