CVEvulnerability

CVE-2025-31324

9.8 CRITICAL Known exploited Published 2025-04-24 Modified 2026-08-04 Official page ↗

CISA Known Exploited Vulnerability

SAP NetWeaver Unrestricted File Upload Vulnerability — SAP NetWeaver

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

Added to KEV: 2025-04-29
Remediation due: 2025-05-20
Ransomware use: Known
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: https://me.sap.com/notes/3594142 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31324

Status: Analyzed
Published: 2025-04-24
Last modified: 2026-08-04
Assigner: [email protected]
CVSS 3.1 ([email protected]): 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-434

Description

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

Affected configurations

• sap netweaver 7.50

Weakness · CWE (1)

CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References