CVE-2025-42928
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: SAP SE

Description
Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution. The system may be vulnerable when specially crafted input is used to exploit the vulnerability resulting in high impact on confidentiality, integrity and availability of the system.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-06-16
AI Q&A
2025-12-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-42928
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
sap jconnect 3.1
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a deserialization flaw in SAP jConnect that can be exploited by a high privileged user under certain conditions. By using specially crafted input, the attacker can execute remote code on the affected system.

Impact Analysis

Exploiting this vulnerability can lead to remote code execution, which may severely impact the confidentiality, integrity, and availability of the affected system.

Compliance Impact

This vulnerability, due to its high impact on confidentiality, integrity, and availability through remote code execution, could potentially lead to non-compliance with standards such as GDPR and HIPAA, which require protection of sensitive data and system integrity. Exploitation might result in unauthorized data access or system disruption, thereby violating these regulations. However, specific compliance impacts are not detailed in the provided resources.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-42928. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart