Description
Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API.�As a result , it has a high impact on the confidentiality, integrity, and availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Business One (SLD) | B1_ON_HANA 10.0, SAP-M-BO 10.0 | — |
Advisories 2
- WID-SEC-2025-1758 SAP Patchday August 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 7, 2025
- NCSC-2025-0245 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Sep 5, 2025