ByteOS Network

CVE Vulnerability Details :

CVE-2025-42897

PUBLISHED

More Info Official Page

Assigner-sap

Assigner Org ID-e4686d1a-f260-4930-ac4c-2f5c992778dd

Published At-11 Nov, 2025 | 00:19

Updated At-12 Nov, 2025 | 20:09

▼CVE Numbering Authority (CNA)

Information Disclosure vulnerability in SAP Business One (SLD)

Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and availability.

Affected Products

Vendor

SAP SE

Product

SAP Business One (SLD)

Default Status

unaffected

Versions

Affected

B1_ON_HANA 10.0
SAP-M-BO 10.0

Problem Types

Type	CWE ID	Description
CWE	CWE-522	CWE-522: Insufficiently Protected Credentials

Type: CWE

CWE ID: CWE-522

Description: CWE-522: Insufficiently Protected Credentials

Metrics

Version	Base score	Base severity	Vector
3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Hyperlink	Resource
https://me.sap.com/notes/3652901	N/A
https://url.sap/sapsecuritypatchday	N/A

Hyperlink: https://me.sap.com/notes/3652901

Resource: N/A

Hyperlink: https://url.sap/sapsecuritypatchday

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References