CVE-2025-42897mediumCWE-522

CVE-2025-42897: falha de média gravidade em SAP_SE SAP Business One (SLD)

Information Disclosure vulnerability in SAP Business One (SLD)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP Business One

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
SAP_SE · SAP Business One (SLD)
CVEs relacionadas — SAP_SE SAP Business One (SLD)

No mesmo produto, das mais perigosas para as menos.

CVE-2025-42951HIGHBroken Authorization in SAP Business One (SLD)EPSS 0.5%CVE-2025-42933HIGHInsecure Storage of Sensitive Information in SAP Business One (SLD)EPSS 0.3%