PT-2025-20812 · Sap · Sap Netweaver Visual Composer

Published 2025-05-13 · Updated 2025-10-22 · CVE-2025-42999

Positive Technologies · (AI Summary)

CVSS v3.1

9.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Visual Composer (affected versions not specified)

Description The issue arises when a privileged user uploads untrusted or malicious content, which upon deserialization, could compromise the confidentiality, integrity, and availability of the host system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-05676

CVE-2025-42999

Affected Products

Sap Netweaver Visual Composer

References · 79

• 🔥 https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324 · Exploit
• https://bdu.fstec.ru/vul/2025-05676 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-42999 · Security Note
• https://twitter.com/djhsecurity/status/1925197057406423198 · Twitter Post
• https://twitter.com/RedLegg/status/1922739710029381817 · Twitter Post
• https://twitter.com/Netlas_io/status/1922599352192680083 · Twitter Post
• https://twitter.com/ChannelSkell/status/1925243467229262003 · Twitter Post
• https://twitter.com/moton/status/1958324325200933141 · Twitter Post
• https://twitter.com/AWNetworks/status/1922798254279868539 · Twitter Post
• https://twitter.com/sequretek_sqtk/status/1961415693460820221 · Twitter Post
• https://t.me/netlas/395 · Telegram Post
• https://onapsis.com/blog/new-exploit-for-cve-2025-31324 · Note
• https://twitter.com/shah_sheikh/status/1958114890914070930 · Twitter Post
• https://twitter.com/DCWebGuy/status/1924879723160613012 · Twitter Post
• https://twitter.com/CyberWolfGuard/status/1970964116929122712 · Twitter Post