CVE-2025-42951 — Broken Authorization in SAP Business One (SLD)

CVE-2025-42951

Broken Authorization in SAP Business One (SLD) PUBLISHED

Description (CNA)

Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API.�As a result , it has a high impact on the confidentiality, integrity, and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business One (SLD)	affected B1_ON_HANA 10.0; affected SAP-M-BO 10.0

CWE

CWE-863

References

https://me.sap.com/notes/3625403
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.