Threat intelligence / Vulnerability
CVE-2025-42999
SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.
Vulnerability
TypeVulnerability
External ID—
First seen2025-05-15
Last seen2025-05-15
Confidence
—
SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.
Labels
CISA KEV context
Vendor / productSAP NetWeaver
Added2025-05-15
Due date2025-06-05
2 recorded
Relationships
2 external