Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CVSS Skor
10.0
EPSS İhtimal
%99.5
Risk Skoru
19.9
Yayın
1 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
harisandhusingh-cmyk/cs50-cve-2025-31324-analysis
PoC — SAP NetWeaver Visual Composer unauthenticated file upload (CVSS 10.0). Benign JSP payload. CISA KEV May 2025 · Patched April/May 2025 · T1190 ·
Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
harshitvarma05/CVE-2025-31324-Exploits
sap netweaver 0day poc by shinyhunters (scattered lapsus$ hunters) affecting all 7.x CVE-2025-31324
SAP NetWeaver Visual Composer Metadata Uploader <= 7.50 CVE-2025-31324 PoC
Onapsis/Onapsis_CVE-2025-31324_Scanner_Tools
CVE-2025-31324 & CVE-2025-42999 vulnerability and compromise assessment tool
Nuclei: SAP NetWeaver Visual Composer Metadata Uploader - Deserialization
İlgili Benzer Açıklar
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
Code Injection vulnerability in Manufacturing Integration and Intelligence
Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
Vulnerability in SAP Approuter
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-31324"