CVE-2025-31324

Critical10.0 Published on Apr 24, 2025

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

Actively exploited

In the CISA exploited-vulnerabilities catalogue since Apr 29, 2025
US federal agencies must remediate it by May 20, 2025 (BOD 22-01)
Attacked 3 days before the vulnerability was made public
Confirmed by sensors, not only by reports
Used in ransomware campaigns

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Source: CISA KEV · Oct 7, 2026 Oct 3, 2026 Oct 3, 2026 Oct 2, 2026 Oct 1, 2026 Oct 1, 2026

CVSS score10.0 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-434

Vendorssap