PT-2025-24598 · Sap · Sap Business One Integration Framework

CVE-2025-42998 · Published 2025-06-10 · Updated 2025-06-10

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Business One Integration Framework (affected versions not specified)

Description The issue concerns inadequate security settings checks in the SAP Business One Integration Framework, allowing attackers to bypass access restrictions and access restricted pages. This results in a low impact on the confidentiality of the application, with no impact on integrity and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

BDU:2025-10424

CVE-2025-42998

Affected Products

Sap Business One Integration Framework

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-42998 · Security Note
• https://bdu.fstec.ru/vul/2025-10424 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/june-2025.html · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/VulmonFeeds/status/1932343943447863564 · Twitter Post
• https://me.sap.com/notes/3594258 · Note
• https://t.me/cvetracker/25855 · Telegram Post