CVE-2025-31324 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious exe…
Critical KEV CVSS: 10.0

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
Vendor
Sap
Product
Netweaver
CWE
CWE-434
Yayın Tarihi
2025-04-24 17:15:35
Güncelleme
2025-10-31 21:56:14
Source Identifier
cna@sap.com
KEV Date Added
2025-04-29

Kategoriler

CWE-434 Netweaver CRITICAL Sap 2025

Referanslar

https://me.sap.com/notes/3594142 https://url.sap/sapsecuritypatchday https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/ https://www.bleepingcomputer.com/news/security/sap-fixes-suspected-netweaver-zero-day-exploited-in-attacks/ https://www.theregister.com/2025/04/25/sap_netweaver_patch/ https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31324