CVE-2025-42933
Insecure Storage of Sensitive Information in SAP Business One (SLD)
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 set 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
SAP_SE · SAP Business One (SLD)Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →