RCE in Sap_se Sap Hana Jdbc Client
CVE-2025-42895
Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confi…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.001 (3.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.9 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H.
Affected products
- Sap_se Sap Hana Jdbc Client — versions HDB_CLIENT 2.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-42895?
- CVE-2025-42895 is a medium-severity vulnerability in Sap_se Sap Hana Jdbc Client, classified under Code Injection. CVSS score: 6.9/10. Published 2025-11-11.
- How severe is CVE-2025-42895?
- Medium severity. CVSS v3 base score is 6.9 out of 10.