CVE-2025-42890: SAP SE SQL Anywhere Monitor Non-GUI

Critical severity, CVSS 10.0. EPSS: 0.7% chance of exploitation in the next 30 days.

SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.

Affected products

• SAP SE SQL Anywhere Monitor Non-GUI

Published 2025-11-11. Last modified 2026-06-17.