Security Flaw in SAP Business One Integration Framework Allows Unauthorized Access

CVE-2025-42998

What is CVE-2025-42998?

A vulnerability in the SAP Business One Integration Framework exists due to insufficient security checks, allowing attackers to bypass standard 403 Forbidden responses. This flaw enables unauthorized access to restricted areas of the application, raising concerns over the potential compromise of sensitive information. While the impact on confidentiality is low, accessing such areas can pose risks associated with information exposure.

References