CVE-2025-42944

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 11, 2025

Last Seen

October 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

SAP Cloud SDK Flaw Exposes OAuth2 Credentials to Attackers60.6

SAP has disclosed a critical vulnerability in its Cloud SDK for Python, tracked as CVE-2026-89111, which carries a CVSS score of 10.0. This maximum-severity flaw allows remote, unauthenticated attackers to exfiltrate OAuth2 client credentials from multi-tenant applications on the SAP Business Techno...

SAP Releases November Security Updates Addressing Critical Vulnerabilities31.9

SAP has released its November security updates, which include 18 new security advisories. Among these, a critical vulnerability in the SQL Anywhere Monitor (CVE-2025-42890) has been identified, receiving a maximum CVSS score of 10 due to hardcoded credentials. Enterprises using SAP systems are urged...

SAP Addresses Critical Flaw in SQL Anywhere Monitor with November Security Update22.1

SAP has released a security update addressing a maximum severity vulnerability in SQL Anywhere Monitor (Non-GUI), tracked as CVE-2025-42890, which involves hard-coded credentials that could allow arbitrary code execution. This flaw received a CVSS score of 10 and was part of the November 2025 Securi...

SAP Addresses Critical Flaw in SQL Anywhere Monitor with November Security Updates20.4

SAP announced a maximum severity security flaw in SQL Anywhere Monitor (Non-GUI), tracked as CVE-2025-42890, which involves hard-coded credentials that could allow arbitrary code execution. The flaw received a CVSS score of 10 and was disclosed as part of SAP's November 2025 Security Patch Day, whic...