SAP SE SAP NetWeaver (Visual Composer development server) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SAP SE SAP NetWeaver (Visual Composer development server): 2 record(s), with affected versions and fixes.
CVE-2025-42999
Critical · 9.1
KEV High · 69 Ransomware CWE-502 May 12, 2025
SAP NetWeaver Deserialization Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
CVE-2025-31324
Critical · 9.8
KEV Urgent · 83 Public exploit Ransomware CWE-434 Apr 24, 2025
SAP NetWeaver Unrestricted File Upload Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.