H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-04-29
Last seen2025-04-29

Confidence

—

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productSAP NetWeaver
Added2025-04-29
Due date2025-05-20
2 recorded

Relationships

2 external

References

nvd
CVE-2025-31324
open
cwe
CWE-434
open