CVE-2025-42890

critical · 10

SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.

CVSS

0.7%

EPSS (exploit prob.)

51st

EPSS percentile

2025-11-11

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-798

References

https://me.sap.com/notes/3666261
https://url.sap/sapsecuritypatchday

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-42890