CVE-2025-42892

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 11, 2025

Last Seen

November 11, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

SAP Releases November Security Updates Addressing Critical Vulnerabilities31.9

SAP has released its November security updates, which include 18 new security advisories. Among these, a critical vulnerability in the SQL Anywhere Monitor (CVE-2025-42890) has been identified, receiving a maximum CVSS score of 10 due to hardcoded credentials. Enterprises using SAP systems are urged...

SAP Addresses Critical Flaw in SQL Anywhere Monitor with November Security Updates20.4

SAP announced a maximum severity security flaw in SQL Anywhere Monitor (Non-GUI), tracked as CVE-2025-42890, which involves hard-coded credentials that could allow arbitrary code execution. The flaw received a CVSS score of 10 and was disclosed as part of SAP's November 2025 Security Patch Day, whic...