VDB
BDU%3A2025-05676
BDU%3A2025-05676
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Уязвимость функции MetadataUploader инструмента Visual Composer программной интеграционной платформы SAP NetWeaver, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP | SAP NetWeaver | |
| SAP_SE | SAP NetWeaver (Visual Composer development server) | VCFRAMEWORK 7.50 |
Timeline
- May 13, 2025 PoC Published
- May 13, 2025 PoC Published
- May 14, 2025 PoC Published
- May 14, 2025 PoC Published
- May 14, 2025 PoC Published
- May 14, 2025 PoC Published
- May 14, 2025 PoC Published
- May 14, 2025 PoC Published
- May 14, 2025 PoC Published
- May 14, 2025 PoC Published
- May 15, 2025 PoC Published
- May 15, 2025 PoC Published
References
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news/may-2025.htm url
- https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/l url
- https://me.sap.com/notes/3604119 url
- https://url.sap/sapsecuritypatchday url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-42999 url
- https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/ url
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news/may-2025.html advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog url