Actively exploited in the wild
SAP NetWeaver Unrestricted File Upload Vulnerability
SAP - NetWeaver · Listed in the CISA KEV since 2025-04-29. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-31324
CriticalCVSS 10.0KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
SAP NetWeaver Visual Composer Metadata Uploader is not protected with proper authorization, allowing unauthenticated agents to upload potentially malicious executable binaries that could severely harm the host system. This affects confidentiality, integrity, and availability.
Risk Assessment
An attacker can upload malicious files, potentially leading to system takeover or data corruption.
Recommendation
Implement proper authorization mechanisms for the Metadata Uploader component. Restrict access and monitor uploaded files.
Original NVD description (English source)
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.