What is CVE-2025-42998?

CVE-2025-42998 is a medium-severity vulnerability in Sap_se Sap Business One Integration Framework, classified under Origin Validation Error. CVSS score: 5.3/10. Published 2025-06-10.

How severe is CVE-2025-42998?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Sap_se Sap Business One Integration Framework

CVE-2025-42998

The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low impact on confidentiality of the applicatio…

EPSS: 0.002 (6.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Sap_se Sap Business One Integration Framework — versions B1_ON_HANA 10.0, SAP-M-BO 10.0

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

Frequently asked questions

What is CVE-2025-42998?: CVE-2025-42998 is a medium-severity vulnerability in Sap_se Sap Business One Integration Framework, classified under Origin Validation Error. CVSS score: 5.3/10. Published 2025-06-10.
How severe is CVE-2025-42998?: Medium severity. CVSS v3 base score is 5.3 out of 10.