CRITICALCVSS 10.0Actively exploited · CISA KEV since 2025-04-29Vulnerability

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

Properties

Euvd product
SAP NetWeaver (Visual Composer development server)
Vulnerability name
SAP NetWeaver Unrestricted File Upload Vulnerability
First seen
2026-08-04T03:55:48+00:00
Cvss score
10
Epss score
0.99486
Last seen
2026-10-19T12:00:27+00:00
Due date
2025-05-20
Euvd assigner
sap
Retrieved at
2026-10-21T01:24:47+00:00
Exploited euvd since
2025-04-29T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2025-04-29
Score
10
Euvd base score version
3.1
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
SAP_SE
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
10

Related Entities (9)

MENTIONED_IN (5)

→[Campaign]Unnamed campaign (ID 69d4…)
→[Campaign]skynox7: Proxyjacking Edge Devices Into Residential Proxies
→[Campaign]Storm-1175 focuses gaze on vulnerable web-facing assets in high ...
→[Campaign]Unnamed campaign (ID 696b…)
→[Campaign]Analyzing React2Shell Threat Actors

AFFECTS_PRODUCT (1)

→[Product]cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*

DESCRIBES (1)

←[KEVEntry]SAP NetWeaver Unrestricted File Upload Vulnerability

HAS_WEAKNESS (1)

→[Weakness]Unrestricted Upload of File with Dangerous Type

INVOLVES (1)

←[Signal]kev_added · 2025-04-29

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2025-31324 (CVSS 10) — Ninja Signal Threat Intelligence | Ninja Signal