What is CVE-2025-42928?

CVE-2025-42928 is a critical-severity vulnerability in Sap_se Sap Jconnect - Sdk For Ase, classified under Deserialization of Untrusted Data. CVSS score: 9.1/10. Published 2025-12-09.

How severe is CVE-2025-42928?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Deserialization in Sap_se Sap Jconnect - Sdk For Ase

CVE-2025-42928

Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution. The system may be vulnerable when specially crafted input is used to exploit the vulnerability…

Vulnerability class: Insecure Deserialization

EPSS: 0.080 (94.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Sap_se Sap Jconnect - Sdk For Ase — versions SYBASE_SOFTWARE_DEVELOPER_KIT 16.0.4, 16.1

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

Frequently asked questions

What is CVE-2025-42928?: CVE-2025-42928 is a critical-severity vulnerability in Sap_se Sap Jconnect - Sdk For Ase, classified under Deserialization of Untrusted Data. CVSS score: 9.1/10. Published 2025-12-09.
How severe is CVE-2025-42928?: Critical severity. CVSS v3 base score is 9.1 out of 10.