Remote Code Execution Vulnerability in SAP jConnect Affecting High Privileged Users

CVE-2025-42928

What is CVE-2025-42928?

A deserialization vulnerability in SAP jConnect can enable high privileged users to execute remote code under specific conditions. Exploiting this flaw involves using specially crafted input, potentially compromising the confidentiality, integrity, and availability of the affected system. Organizations utilizing SAP jConnect should promptly apply security updates to mitigate this risk. For more details and patch information, refer to the official SAP security patches and notes.

References