What is CVE-2025-42933?

CVE-2025-42933 is a high-severity vulnerability in Sap_se Sap Business One (Sld), classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2025-09-09.

How severe is CVE-2025-42933?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Sap_se Sap Business One (Sld)

CVE-2025-42933

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impac…

EPSS: 0.003 (17.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sap_se Sap Business One (Sld) — versions B1_ON_HANA 10.0, SAP-M-BO 10.0

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2025-42933?: CVE-2025-42933 is a high-severity vulnerability in Sap_se Sap Business One (Sld), classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2025-09-09.
How severe is CVE-2025-42933?: High severity. CVSS v3 base score is 8.8 out of 10.