Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-42933

Insecure Storage of Sensitive Information in SAP Business One (SLD)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business One (SLD)

Default version status: unaffected

  • B1_ON_HANA 10.0affected
  • SAP-M-BO 10.0affected

References