CVE-2025-42897

published 2025-11-11

CVE-2025-42897: Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and availability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_business_one	—	—
sap_se	sap_business_one	—	—

CWE-522