CVE-2025-42998: SAP Business One Integration Framework · Origin Validation Error
Affects SAP Business One Integration FrameworkSource CVE Database V5
Not known to be exploited · CVSS 5.3 Medium.
Data as of 26 Oct 2026, 09:15 UTC
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 10 Jun 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
European organizations should implement the following specific mitigations: 1) Monitor SAP's official channels closely for patches or updates addressing CVE-2025-42998 and apply them promptly once available. 2) In the interim, restrict network access to the SAP Business One Integration Framework interfaces to trusted internal networks or VPNs to reduce exposure to external attackers. 3) Implement web application firewalls (WAFs) with custom rules to detect and block suspicious requests that attempt to bypass origin validation or access restricted pages. 4) Conduct thorough access control reviews and ensure that sensitive pages have additional authentication or authorization checks beyond origin validation. 5) Enable detailed logging and monitoring of access attempts to restricted pages to detect potential exploitation attempts early. 6) Educate IT and security teams about this specific vulnerability to raise awareness and readiness. 7) Consider deploying additional security controls such as network segmentation and intrusion detection systems (IDS) to limit lateral movement if the vulnerability is exploited.
Description
The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low impact on confidentiality of the application, there is no impact on integrity and availability.