VDB
BDU%3A2025-04927
BDU%3A2025-04927
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции MetadataUploader инструмента Visual Composer программной интеграционной платформы SAP NetWeaver, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP | SAP NetWeaver |
Timeline
- Apr 25, 2025 CVE Published
- Sep 30, 2025 PoC Published
- Feb 4, 2026 PoC Published
References
- https://url.sap/sapsecuritypatchday url
- https://vulners.com/cve/CVE-2025-31324 url
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2025.html url
- https://www.cve.org/CVERecord?id=CVE-2025-31324 url
- https://me.sap.com/notes/3594142 url
- https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/ url