CVE-2025-42998 — Security misconfiguration vulnerability in SAP Business One Integration Framework

CVE-2025-42998

Security misconfiguration vulnerability in SAP Business One Integration Framework PUBLISHED

Description (CNA)

The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low impact on confidentiality of the application, there is no impact on integrity and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business One Integration Framework	affected B1_ON_HANA 10.0; affected SAP-M-BO 10.0

CWE

CWE-346

References

https://me.sap.com/notes/3594258
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.