What is CVE-2025-42933?

CVE-2025-42933 is a high-severity vulnerability in Sap Se Business One (Sld), classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2025-09-09.

How severe is CVE-2025-42933?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Sap Se Business One (Sld)

CVE-2025-42933

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

EPSS: 0.003 (17.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sap_se Sap Business One (Sld) — versions B1_ON_HANA 10.0, SAP-M-BO 10.0

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

Frequently asked questions

What is CVE-2025-42933?: CVE-2025-42933 is a high-severity vulnerability in Sap Se Business One (Sld), classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2025-09-09.
How severe is CVE-2025-42933?: High severity. CVSS v3 base score is 8.8 out of 10.