Insufficient Validation in SAP HANA JDBC Client

CVE-2025-42895

What is CVE-2025-42895?

The SAP HANA JDBC Client is exposed to a vulnerability due to inadequate validation of connection property values. This allows a high-privilege, locally authenticated user to inject malicious parameters, potentially leading to unauthorized code execution. While the impact is primarily on the application's availability, there are also implications for data integrity and confidentiality. It is essential to address this issue to maintain a secure environment and prevent potential service disruptions.

References