CVE-2025-42897 — Information Disclosure vulnerability in SAP Business One (SLD)

CVE-2025-42897

Information Disclosure vulnerability in SAP Business One (SLD) PUBLISHED

Description (CNA)

Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business One (SLD)	affected B1_ON_HANA 10.0; affected SAP-M-BO 10.0

CWE

CWE-522

References

https://me.sap.com/notes/3652901
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.