CVE-2025-42933: SAP SE SAP Business One Sld

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

Affected products

• SAP SE SAP Business One Sld: version B1_ON_HANA 10.0 only

Published 2025-09-09. Last modified 2026-06-17.