Known Exploited Vulnerabilities April 29, 2025 · CISA KEV Catalog

CVE-2025-31324: SAP Net Weaver Unrestricted File Upload Vulnerability

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2025-31324SAP

Related

CVE-2025-42999: SAP Net Weaver Deserialization Vulnerability Known Exploited Vulnerabilities · May 15, 2025

CVE-2017-12637: SAP Net Weaver Directory Traversal Vulnerability Known Exploited Vulnerabilities · Mar 19, 2025

CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability Known Exploited Vulnerabilities · Sep 30, 2024