Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-42998

Security misconfiguration vulnerability in SAP Business One Integration Framework

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low impact on confidentiality of the application, there is no impact on integrity and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business One Integration Framework

Default version status: unaffected

  • B1_ON_HANA 10.0affected
  • SAP-M-BO 10.0affected

References