CVE-2025-42928 — Deserialization Vulnerability in SAP jConnect - SDK for ASE

CVE-2025-42928

Deserialization Vulnerability in SAP jConnect - SDK for ASE PUBLISHED

Description (CNA)

Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution. The system may be vulnerable when specially crafted input is used to exploit the vulnerability resulting in high impact on confidentiality, integrity and availability of the system.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP jConnect - SDK for ASE	affected SYBASE_SOFTWARE_DEVELOPER_KIT 16.0.4; affected 16.1

CWE

CWE-502

References

https://me.sap.com/notes/3685286
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.