CVE-2026-24319 — Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)

CVE-2026-24319

Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files) PUBLISHED

Description (CNA)

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business One (B1 Client Memory Dump Files)	affected B1_ON_HANA 10.0; affected SAP-M-BO 10.0

CWE

CWE-316

References

https://me.sap.com/notes/3679346
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.