PT-2025-20812 · Sap · Sap Netweaver Visual Composer

Published 2025-05-13 · Updated 2025-10-27 · CVE-2025-42999

Positive Technologies · (AI Summary)

CVSS v3.1

9.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Visual Composer (affected versions not specified)

Description The issue arises when a privileged user uploads untrusted or malicious content, which upon deserialization, could compromise the confidentiality, integrity, and availability of the host system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-05676

CVE-2025-42999

Affected Products

Sap Netweaver Visual Composer

References · 79

• 🔥 https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324 · Exploit
• https://bdu.fstec.ru/vul/2025-05676 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-42999 · Security Note
• https://twitter.com/ChannelSkell/status/1925243467229262003 · Twitter Post
• https://twitter.com/ThreatResq/status/1958037100336501198 · Twitter Post
• https://onapsis.com/blog/new-exploit-for-cve-2025-31324 · Note
• https://twitter.com/socradar/status/1922917364447969768 · Twitter Post
• https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/l · Note
• https://twitter.com/CipherN0/status/1922661951202554062 · Twitter Post
• https://twitter.com/securityRSS/status/1958115095059329328 · Twitter Post
• https://twitter.com/leonov_av/status/1968296833224188276 · Twitter Post
• https://twitter.com/djhsecurity/status/1925197057406423198 · Twitter Post
• https://twitter.com/PoseidonTPA/status/1958120477203058940 · Twitter Post
• https://twitter.com/MalwarePatrol/status/1957909437235986773 · Twitter Post
• https://twitter.com/moton/status/1958324325200933141 · Twitter Post