Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting (XSS) vulnerability. This issue had a low impact on the confidentiality and integrity of the application with no impact on availability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-10 | 2 | Disclosure2 |
| 2026-03-15 | 1 | General1 |
Im happy to share that I found my first CVE (CVE-2026-0489) with Yossi Ayano but definitely not the last. for more info: https://www.cve.org/CVERecord?id=CVE-2026-0489
Post summary
The user announces discovery of CVE-2026-0489 and links to its CVE record, but provides no technical or exploit details.
🚨*CVE* CVE-2026-0489 Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject spec… https://www.cve.org/CVERecord?id=CVE-2026-0489 ----- Traducción: CVE-2026-0489 Deb… http://infoflow.cloud`
Post summary
CVE-2026-0489 is disclosed as a flaw in SAP Business One Job Service where insufficient validation of URL query parameters could allow an unauthenticated attacker to inject content; no PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-0489 Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject spec… https://www.cve.org/CVERecord?id=CVE-2026-0489
Post summary
A new vulnerability (CVE‑2026‑0489) is reported in SAP Business One’s Job Service, where insufficient validation of input in the URL query parameter could allow an unauthenticated attacker to perform injection. No further details on exploits or fixes are provided.