Sap Business One (Sld)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_business_one_(sld):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Business One (Sld) (7b58a8ef-2a26-59e0-8b84-cca26ab00334) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-42951 |
vulnerable | 2026-06-08 07:25:08.452718 |
Broken Authorization in SAP Business One (SLD)
HIGH (8.8)
Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API.�As a result , it has a high impact on the confidentiality, integrity, and availability of the application.
Published: 2025-08-12T02:08:43.494Z
Updated: 2026-02-26T17:49:44.191Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42933 |
vulnerable | 2026-06-08 07:25:08.433165 |
Insecure Storage of Sensitive Information in SAP Business One (SLD)
HIGH (8.8)
When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.
Published: 2025-09-09T02:11:26.232Z
Updated: 2026-02-26T17:49:06.324Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42897 |
vulnerable | 2026-06-08 07:25:08.387477 |
Information Disclosure vulnerability in SAP Business One (SLD)
MEDIUM (5.3)
Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and availability.
Published: 2025-11-11T00:19:50.996Z
Updated: 2025-11-12T20:09:58.072Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.