CVE-2025-31324 - SAP NetWeaver Visual Composer missing authorization
Missing authorization in the Metadata Uploader can let an unauthenticated attacker upload potentially malicious executable binaries, affecting confidentiality, integrity, and availability.
Tags: missing-authorization, file-upload, unauthenticated, sap, exploited
- Product
- SAP NetWeaver Visual Composer development server VCFRAMEWORK 7.50
- Severity
- critical (CVSS 10)
- Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H- Published / added
- 2025-04-24
- Signals
- CISA KEV