Information Disclosure Vulnerability in SAP Business One by SAP

CVE-2025-42897

What is CVE-2025-42897?

An information disclosure vulnerability exists in the anonymous API of SAP Business One (SLD), enabling attackers with standard user access to retrieve sensitive information without proper authorization. While this flaw affects the confidentiality of the application, it does not compromise its integrity or availability, highlighting the need for timely patching and user awareness to safeguard sensitive data.

References