CVE-2025-31324: SAP NetWeaver Unrestricted File Upload Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.
Other sources
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Follow applicable BOD 22-01 guidance for cloud services to mitigate exposure of SAP NetWeaver Visual Composer Metadata Uploader.
- Compensating control
Discontinue use of the product (SAP NetWeaver / Visual Composer Metadata Uploader) if vendor mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31324?
CVE-2025-31324 is considered critical due to the potential for unauthenticated code execution on affected systems.
How do I fix CVE-2025-31324?
To mitigate CVE-2025-31324, it is essential to apply the latest security patches provided by SAP for NetWeaver.
What systems are affected by CVE-2025-31324?
CVE-2025-31324 affects SAP NetWeaver versions that utilize the Visual Composer Metadata Uploader.
What type of attack is CVE-2025-31324 associated with?
CVE-2025-31324 is associated with unauthorized file uploads leading to potential remote code execution.
What could happen if CVE-2025-31324 is exploited?
Exploitation of CVE-2025-31324 could result in severe harm to the host system, including loss of data integrity and confidentiality.