Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CVSS score
10.0
EPSS probability
%99.5
Risk score
19.9
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
harisandhusingh-cmyk/cs50-cve-2025-31324-analysis
PoC — SAP NetWeaver Visual Composer unauthenticated file upload (CVSS 10.0). Benign JSP payload. CISA KEV May 2025 · Patched April/May 2025 · T1190 ·
Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
harshitvarma05/CVE-2025-31324-Exploits
sap netweaver 0day poc by shinyhunters (scattered lapsus$ hunters) affecting all 7.x CVE-2025-31324
SAP NetWeaver Visual Composer Metadata Uploader <= 7.50 CVE-2025-31324 PoC
Onapsis/Onapsis_CVE-2025-31324_Scanner_Tools
CVE-2025-31324 & CVE-2025-42999 vulnerability and compromise assessment tool
Nuclei: SAP NetWeaver Visual Composer Metadata Uploader - Deserialization
Similar Vulnerabilities
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
Code Injection vulnerability in Manufacturing Integration and Intelligence
Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
Vulnerability in SAP Approuter
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-31324"