Cross-Site Scripting Vulnerability in SAP Business One Job Service

CVE-2026-0489

What is CVE-2026-0489?

The SAP Business One Job Service has a vulnerability stemming from inadequate validation of user-controlled input in URL query parameters. This flaw permits an unauthenticated attacker to exploit the application by injecting specially crafted inputs. If this input is processed by a victim, it may lead to a DOM-based Cross-Site Scripting (XSS) vulnerability. While the impact on confidentiality and integrity is minimal, it poses potential risks that should not be overlooked.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References