SAP Business One (SLD) vulnerabilities

2 known vulnerabilities in SAP Business One (SLD) from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SAP Business One (SLD): Insufficiently Protected Credentials

  CVE-2025-42933Sep 9, 2025SAP

  When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidential

• 8.8 High severity

  SAP Business One (SLD): Incorrect Authorization

  CVE-2025-42951Aug 12, 2025SAP

  Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API.�As a result , it has a high impact on the confidentiality, integrity, and availability of the