CVE-2025-42951
Broken Authorization in SAP Business One (SLD)
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API.๏ฟฝAs a result , it has a high impact on the confidentiality, integrity, and availability of the application.
| Vendor | sap_se |
| Product | sap business one (sld) |
| Published | Aug 12, 2025 |
| Last Updated | Feb 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for sap_se sap business one (sld)
Be the first to know when new high vulnerabilities affecting sap_se sap business one (sld) are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
SAP_SE / SAP Business One (SLD)
B1_ON_HANA 10.0 SAP-M-BO 10.0