Vulnerabilidades do SAP SE SAP NetWeaver (Visual Composer development server)
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SAP SE SAP NetWeaver (Visual Composer development server): 2 registro(s), com versões afetadas e correções.
CVE-2025-42999
Crítica · 9.1
KEV Alta · 69 Ransomware CWE-502 12/05/2025
SAP NetWeaver Deserialization Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
CVE-2025-31324
Crítica · 9.8
KEV Urgente · 83 Exploit público Ransomware CWE-434 24/04/2025
SAP NetWeaver Unrestricted File Upload Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.